We store your bag, delivery quotes, order items, delivery address, contact details, payment references and shipment tracking to process purchases from the UNLISPACE Shop and handle support. We use your item and delivery details to calculate delivery options, process your order and arrange shipment. Stripe receives the contact and delivery details needed to calculate applicable taxes and prepare payment; payment card details are entered directly in Stripe Checkout. When you customize an item, we also store the artwork you upload, your text and font choices, generated print files, product previews and your design approval. We share the necessary artwork and item choices with our production service to prepare previews and make your order. These designs and previews are private to your account and authorised operations; the production service receives temporary access to the required print file. Order details are private to your account and authorised operations. Financial and order records may be retained for accounting, refunds and disputes. The Service providers section below explains necessary disclosures and international processing.
Your account and your content
When you choose an available social sign-in provider, Google, Facebook or LinkedIn supplies an account identifier, name and email address. Google may also supply a profile image; UNLISPACE does not request Facebook profile images or load LinkedIn profile images. Facebook and LinkedIn access tokens are used only on the server to complete sign-in and are not retained. We do not request posting, friend-list or Page-management access through social sign-in. We use these to authenticate you, associate your spaces with your account and operate the platform. Published spaces, posts, public comments and reactions are visible to others and may be indexed by search engines and AI services.
Appearance
UNLISPACE follows your device’s light or dark appearance unless this browser already has a remembered preference. Layout and template headers do not include an appearance toggle. A remembered preference is stored only in this browser across pages and visits, with dark as the fallback when no device preference is available. Appearance does not change your space’s colour palette or content.
Posts
The Posts is public. Recognisable email addresses and phone numbers in post and comment text are masked on the server. Signed-in members may reveal one by clicking or tapping; Spacey cannot reveal them automatically. Masking cannot recognise every obfuscated contact detail or remove information inside a photo, video or document. Review attachments before publishing. Photos and videos on available posts are public; document downloads require an active signed-in account. Unattached Posts files are restricted to their uploader.
Taking down a post immediately hides its comments, reactions and space shares and revokes its attachment URLs. It cannot recall copies already downloaded or shared elsewhere. Private storage and backups may retain removed files until operational cleanup; financial and moderation records can be retained for accounting, disputes and abuse prevention. We store keyed network identifiers for short-lived request limits, rather than raw IP addresses in Posts rate-limit store. Hosting access logs are managed separately. We discourage automated collection using access checks, request limits and crawler restrictions; public content cannot be made impossible to copy.
Content screening and attachment review
We screen submitted space content, posts, comments and relevant Spacey requests for pornography and gambling. The text, links and supported images necessary for this screening are sent to our existing AI provider, Groq, including when you use manual tools. Screening is a platform safety function and does not use your paid Spacey allowance. Do not include secrets or confidential personal information. We reuse exact-content screening decisions for up to 24 hours; cache records contain a fingerprint and decision, not the submitted text, and expired entries are cleared during subsequent new screening requests. Attachments awaiting review remain private to their uploader and authorised platform administration; they cannot be published until approved. Administrators inspect the complete file and record the decision, reason, reviewer, time and file fingerprint for abuse prevention and disputes. Supported photos are inspected by our existing Groq vision provider and clear automatically when screening passes. Flagged, uncertain, failed or unsupported inspections remain private for human review; videos and documents currently require human review. Automated decisions record a file fingerprint and result without impersonating a human reviewer. Contact support to appeal a decision.
Private information
Unpublished text drafts, creator applications, funding references and payment records are restricted to their owners and authorised administration as appropriate. Booking information and booking messages are available to the relevant client and space owner. Managed unpublished space media and its cached derivatives require owner access. Posts attachments follow the access rules below. Never publish confidential files.
Optional audience and engagement analytics
When enabled by the operator, UNLISPACE offers optional Google Analytics. It starts only after you choose to allow it in this browser. Rejecting it does not limit platform features. General page categories and limited interaction events help us understand acquisition, repeat visits and engagement. Google receives browser/device information, approximate geographic information derived from the connection, analytics identifiers and consent signals. We do not send account names, email addresses, messages, customer content, payment references or private URLs. Private pages use general categories; security, secret access-link, administrative and unknown routes are excluded.
Demographic insights are a separate optional choice. If you allow them, Google signals may associate activity with information from eligible Google accounts and provide aggregated age, gender and interest reports. We do not receive your individual Google demographic profile. This choice also permits Google advertising cookies and signals, including data use for advertising personalisation; Google requires these signals for demographic collection. Analytics-only consent keeps advertising storage and signals denied. UNLISPACE does not link this property to Google Ads or run remarketing campaigns. Google may withhold small demographic groups. Aggregated reports may be used to understand the business and describe its audience to prospective partners, investors or buyers; individual records are not offered as a contact list.
Use Analytics settings to review or withdraw your choice. A first-party preference is stored in this browser for six months. Analytics cookies also expire after six months. A recognised Global Privacy Control or Do Not Track preference keeps optional analytics off. Withdrawal stops further collection and clears this site's Google measurement cookies, but does not erase previously collected reports. The configured Google Analytics event-data retention is two months; aggregate reports can remain available longer. Contact the operator for data requests. Google privacy policy.
Google advertising on Posts
The public Posts and posts belonging to Free-tier spaces offer non-personalized Google advertising through AdSense on mobile and desktop. Posts belonging to spaces whose owner has verified Pro access do not load Google advertising. Your visitor account tier does not change a space’s advertising eligibility. Only a space owner can publish updates to that space’s Posts; visitors can comment, react and share subject to sign-in and verification requirements. Google scripts load automatically on eligible streams. Google's standard loader can make initialization and inventory requests; the application requests the rail only when the applicable privacy signals permit it. Google receives connection and browser/device information and manages its own advertising and consent identifiers. Google privacy choices can collect, reject or withdraw the choices applicable to your visit. Refusing advertising does not limit Posts or sponsored-space links. A recognised Global Privacy Control or Do Not Track signal keeps this optional integration off.
Where applicable, use Google privacy choices in the Posts advertisement controls for European consent, or Google's Do Not Sell or Share My Personal Information footer control for US opt-out choices. Google's own consent records can remain until changed through its controls. Advertising choices are separate from Analytics settings. Open Posts advertising controls · Google privacy policy.
Sessions and attribution
UNLISPACE uses an HTTP-only session cookie for sign-in, request protection and continuity. When you follow a creator’s campaign link, the session temporarily holds the referral. Only signed-in Google-verified accounts established for at least 24 hours can submit reward candidates, after 30 seconds of paced viewing and a server-verified Cloudflare Turnstile check. Cloudflare receives browser and device signals to assess automation under its own privacy notice. UNLISPACE stores campaign-specific account and hashed network-prefix identifiers, the verification-token hash, viewing duration and risk status; raw IP addresses and browser fingerprints are not stored in campaign attribution records. Account, token and shared-network daily limits prevent repeated candidates. Candidates pass a 24-hour risk hold before automatic approval; filters may make mistakes and can be appealed through support. Anonymous visits do not earn rewards.
Account referral attribution and payouts
Referral invitations are separate from creator campaign visits. Choosing an invitation before creating a new account stores your explicit choice in the first-party browser session for up to 30 days, without third-party tracking cookies. A successful new-account signup is linked to one referrer. The referrer sees an anonymous account reference, signup date, monthly eligible-spend and commission totals; they do not see your name, email, messages or itemised purchases. You acknowledge this reporting before choosing attribution. Joining without a referral is available.
Stripe notifications and scheduled API reconciliation automatically record campaign funding, refunds and pending commissions. Recipient payouts are issued manually. UNLISPACE arranges necessary recipient verification and supported Wise payment details privately when payment is due, and stores the completed payment reference and an administrator audit record. Automatic Stripe Connect onboarding is disabled; previous connected-account and transfer records are retained for reconciliation. Authorised administrators can inspect relevant financial audit records and handle exceptions; never post bank details publicly. Referral attribution, acceptance versions, financial adjustments, payout references and audit records are retained as needed for accounting, fraud prevention and disputes. Contact the operator about access, correction, deletion, retention or opting out of future referral reporting; legal accounting records may need to be retained. Wise processes recipient and transfer data under its own privacy notice. The optional Wise invitation link may benefit the operator; it is not required to earn commission.
Private messages and Spacey
Private conversations are restricted to their participants in the app. Messages and reports are stored on UNLISPACE and are not end-to-end encrypted. Pusher Channels receives connection information and empty refresh notifications, rather than message text. The former public lounge is closed and its older messages remain subject to the previous 30-day expiry. Spacey stores your request, step history and outcomes so you can review progress or stop. It sends your request and relevant selected-space details to Groq for planning, including business records you ask it to work with. Avoid entering passwords or unnecessary sensitive information. Spacey can use supported workflows only within your account permissions. Public changes and sensitive actions use exact review controls. Passwords, device files, verification and hosted payment steps stay in your hands. Contact the operator for privacy or retention requests.
Review invitations
After your first post, first space creation or first confirmed purchase, UNLISPACE may send one optional, neutral feedback email with a link to our Trustpilot profile. We send this through our configured email provider and do not export your name, email, post content or purchase details to Trustpilot. Visiting Trustpilot and submitting a review is your choice, under its own privacy notice. Each email includes a private link to stop review invitations. We retain a minimal account-linked invitation and opt-out record to prevent repeat emails. Manage review invitations.
Following, notifications and sharing
Following a published space stores a connection between your account and that space. New posts appear in your in-app notification inbox. Unfollowing removes that connection and its update notifications. We keep your notification read state and a private per-conversation message cursor to calculate unread counts; other users do not see your read receipts. These features do not subscribe you to marketing emails.
An Posts share publishes your introduction and a credited link to the original space in your chosen live space. Public shares are visible to others. The original preview is hidden if its source becomes private or is deleted. External sharing opens the selected provider’s composer or lets you copy a link and credited caption; that provider receives the link and any text you choose to send under its own policies. Eligible creator tracking links retain campaign attribution and require advertising disclosure. Template hearts are stored once per account and design. Public heart and current usage totals are aggregated, including private drafts, without revealing who uses a template.
Service providers
For purchases from the UNLISPACE Shop, we disclose the item, contact and delivery details needed by order processing and delivery services. These services may process those details internationally to prepare and deliver your order. Hostinger provides hosting and database infrastructure. Google, and Facebook or LinkedIn when enabled, provide authentication; the site currently requests Google Fonts. While composing a signed-in post with no industry selected, Spacey may send draft text to Groq to suggest an industry before you publish. Recognised email addresses and phone numbers are masked first; other details in the draft may still be included. Selecting an industry manually stops further suggestions. The suggestion does not publish or save the draft. Groq also receives the text submitted to AI drafting tools and, when Spacey is used, the request and relevant selected-space details needed to plan an action. Avoid entering passwords or unnecessary sensitive information into AI prompts. Optional email notifications use the provider configured by the operator; the platform works without email delivery.
Posts reviews
Your name, star rating, optional review and the author’s response are public. We check for a prior text comment on the author’s available posts or a private conversation where both participants sent messages. The chat check uses only message existence; it does not copy message text or reveal conversation identifiers to reviewers, the public or Spacey. This does not verify a purchase or establish that a claimed experience is genuine. Contact details in review text are masked. Removing your review hides its response too. A limited record remains to prevent duplicate reviews; a removed source post or inactive account hides the associated review.
Stripe campaign funding
Funding takes place on Stripe-hosted Checkout. Stripe receives the payment and billing details you enter there under Stripe’s privacy notice. UNLISPACE sends the campaign ID and funding amounts, stores payment/session IDs, verification status, amounts, refunds and audit records, and receives signed payment notifications. It does not store card numbers, CVV or bank credentials. Campaign funding is private to its sponsor and authorised administrators. Creator visit counts and campaign rewards use a separate tracker from referral commissions.
Stock photography
When you search for stock photos, your search subject is sent to Unsplash through our server. Selecting a photo reports the selection to Unsplash. Photos load directly from Unsplash, which receives browser connection information including your IP address. We retain the photo ID, URL and photographer credit with your space. Credits are public when the image is published. Do not include private customer details in photo searches. Unsplash privacy policy.
Stock video
Video search subjects are sent to Pixabay through our server. Search metadata is cached for 24 hours. Selected videos load from Pixabay, which receives browser connection information including your IP address. We retain the video ID, URL and creator credit with your space. Pixabay privacy policy.
Request account or social sign-in data deletion
To request deletion of your UNLISPACE account or information received through Facebook, Google or LinkedIn sign-in, use our contact form. Say which account and sign-in provider your request concerns. We will verify that the account belongs to you before acting and respond about the request through your contact details. Do not send passwords, access tokens or verification codes.
You can also remove UNLISPACE in Facebook’s Apps and Websites settings to revoke Facebook access. Removing the connection does not by itself delete information already held by UNLISPACE; contact us to request that deletion. We handle deletion requests individually, including any records we need to retain for financial, dispute or security reasons. This is a request process, not an instant automatic account-deletion tool.
Retention and requests
Account information and saved content are retained while needed to operate your account. Campaign attribution, review decisions and payment records are retained to administer campaigns and resolve disputes. Contact the operator to request access, correction or deletion, report a privacy concern, or ask about retention. Some financial or dispute records may need to be retained after a request. No automated deletion schedule or formal compliance certification is claimed.
This dashboard does not collect bank credentials or identity documents. Manual payout administration may require recipient information through an agreed private channel and the provider’s verification process. Never share passwords, card numbers or verification codes. External payment providers have their own privacy notices.
