How your data is processed

Updated: 28 September 2026

Controller and contacts

Data used

We process the information you enter in forms and your account, business contact details, content you submit and information needed to provide the requested features. The service also uses session data, preferences, operational data and security logs.

Purposes and legal bases

Data is used to provide the service, manage requests and content, protect accounts and answer questions. The bases are performance of the requested service, pre-contractual activities, legal obligations, legitimate interests in security and consent for features that require it.

Services used

City Reveal uses Cloudflare for delivery and security, Google and Apple for sign-in chosen by the user, Zoho Mail for communications and Stripe for payment handling in the relevant procedures. Providers receive the data needed to perform their service.

For payments, order references, amount, currency and transaction status are processed. Card details are handled by the payment service.

Retention

We keep data for the period needed for the service, requests, security and applicable obligations. Records relating to content and reports support management, review and traceability of operations.

Your rights

You may request access, rectification, erasure, restriction, objection and portability where applicable. You may also lodge a complaint with the Italian data protection authority or the competent authority. Write to us with the email or reference used in the service.

Shared tours and experiences

Shared features use preferences, languages, declared adult age, date, capacity, request status and messages needed for the group. Public listings use a summary and a pseudonymous label. Tour details and group messages are reserved for approved participants.

For hosted experiences, the venue receives the operational information needed to manage the proposal. Identity, contact details and the device’s precise location remain private. Reports, blocks and review decisions are accessible to people authorised to manage them.

Sign-in and account management

Google or Apple sign-in uses the identifier and data you authorise them to share. Apple may provide a private email address. You can sign out and delete your account from the profile screen; the service manages sessions and linked identities.