Privacy policy

Last updated 15 October 2026 · Version 2026-10-15

1. Who is responsible

Patrick Rosenberg (sole proprietorship) (organisation number 920218-3332, Perstorpsvägen 223, 123 64 Farsta, Sweden) is the controller of your personal data for Own Your City. Contact: patrick@fabera.se.

2. What we collect and why

  • Account data: email address, password (stored hashed by our authentication provider), username and display name. Used to run your account. Legal basis: contract.
  • Ownership data: which cities you own, when, and the price paid. Your username, display name and owned cities are public on the city pages, profile and leaderboard. Legal basis: contract.
  • Payment data: payments are handled by Stripe. We receive a payment reference, the amount and your email, never your card number. Retained as required by bookkeeping law. Legal basis: legal obligation and contract.
  • Technical data: IP address and request logs, processed by our hosting provider for security and operation. Legal basis: legitimate interest.

3. Cookies

We use only strictly necessary cookies to keep you signed in. We do not use advertising or analytics cookies.

4. Who we share data with

  • Supabase: database and authentication.
  • Cloudflare: hosting and delivery.
  • Stripe: payments and refunds.
  • CARTO and OpenStreetMap contributors: map tiles, requested from your browser.

Some of these providers process data outside the EU/EEA. Where they do, transfers rely on the European Commission's standard contractual clauses or an adequacy decision.

5. How long we keep it

Account data is kept while your account exists. If you delete your account we remove it, except data we must keep by law (for example accounting records, kept for 7 years in Sweden). Claim history on city pages is anonymised when the account is deleted.

6. Your rights

You can ask for access to, correction, deletion or a copy of your data, and object to or ask us to restrict processing, by writing to patrick@fabera.se. You can complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or to your local supervisory authority.

See also the terms of service.