Information we collect
We collect submitted URLs; public website metadata and relevant visible homepage content; moderation records; an email address you provide when a listing needs manual review, so we can send the review outcome and a checkout link; PayPal-supplied payer name, email, order and capture identifiers; policy acceptance records; security information such as limited IP-derived metadata; a short-lived hashed network address used only to count how many people are currently looking at the city; and analytics including visits, referrers, profile views, outbound clicks, how long a tab stays in front, whether someone looked inside a landmark or played with the city, purchase events, and rank changes.
How we use information
We use data to review eligibility, create and rank listings, process and reconcile payments, prevent fraud and abuse, provide support, send transactional messages including review and checkout emails, maintain policy records, improve performance, and report only real platform metrics. The public city stats page shows aggregated visitor, listing, and engagement counts, not individual sessions.
Service providers
PayPal processes payment credentials; we do not store raw card details. Public website content may be processed by OpenAI for structured policy classification. Hosting, email, analytics, and security providers may process limited information on our behalf.
Retention
Payment, legal acceptance, moderation, audit, and dispute records are retained as reasonably needed for compliance and operations. Analytics and security data may be aggregated or deleted when no longer needed. Expired company pages may remain as a clearly labeled historical archive.
Security
We use HTTPS, access controls, server-only secrets, signed payment webhooks, restricted URL fetching, rate limits, and other safeguards. No online system can guarantee absolute security.
Your choices
You may request access, correction, or deletion where applicable by emailing hello@mlola.com. Some payment, fraud, legal, or dispute records may need to be retained.