Privacy Policy

The data controller is [OPERATOR], [ADDRESS]. For anything in this policy, contact [DPO EMAIL] or use the support page.

• Account — display name, email address, hashed password. Needed to give you an account.
• Wishlist signups — your email address, when you submitted it, the language you were browsing in, and your account id if you were signed in.
• Activity — cards you build, votes you cast, tracks you play, missions, streaks, follows and messages. This is the product.
• Purchases — what you bought, when, and your SVC balance and history. We never see or store your card number; our payment provider handles that.
• Uploads — images and audio you add to an artist page or a card, stored with our media host.
• Technical — IP address and request metadata in server logs, used for security and rate limiting.

We do not run advertising trackers, we do not sell your data, and we do not build advertising profiles.

• Performing our contract — running your account, delivering purchases, saving your cards.
• Legitimate interests — keeping the service secure, preventing vote manipulation and fraud, and understanding which features get used.
• Consent — wishlist and product emails. You can withdraw it at any time.
• Legal obligation — keeping transaction records for tax and accounting.

We keep a few things in your browser's local storage rather than in cookies: your session token, your language choice, your saved Studio draft, and a note that you joined the wishlist. These are needed for the site to work and are not used for tracking.

The homepage embeds a YouTube video. Playing it lets YouTube set its own cookies, under Google's privacy policy rather than ours.

We share data only with providers that help us run the service:

• Our hosting provider — servers and database.
• Our media host — images and audio you upload.
• Our payment and subscription provider — processing purchases.
• Our email provider — sending the messages you asked for.

Some of these operate outside your country. Where data leaves the UK/EEA it is transferred under Standard Contractual Clauses or an equivalent safeguard.

• Account and activity data — while your account exists, then deleted within 30 days.
• Wishlist signups — until you unsubscribe or ask us to remove you.
• Purchase records — as long as tax law requires, typically 6–7 years.
• Server logs — 30 days.

You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or take it elsewhere in a portable format. Ask via the support page and we will answer within 30 days, free of charge.

If you think we have got it wrong you can complain to your national data protection authority.

Streetvers is not for under-16s, and purchases are 18+. We do not knowingly collect data from children. If you believe a child has given us data, tell us and we will delete it.

We will post changes here and update the effective date. Material changes get notice before they take effect.