Security & Trust Centre
Last updated: July 27, 2026
Urban Design Index is an independently operated online platform based in Ontario, Canada. This page describes the security and privacy controls currently used by Urban Design Index. It is maintained by Urban Design Index and is not an independent audit, certification, or guarantee of complete security.
What we collect
You may browse Urban Design Index without creating an account. An account is required to submit entries, comment, like content or manage contributions.
Creating an account requires an email address or a linked Google account. You may also provide an optional display name. When you submit an entry, we store the photos you upload, the location you select and the information you add.
We do not sell personal information.
We do not currently use advertising networks, advertising cookies or disclose personal information to advertisers. Urban Design Index may display advertising in the future. Before introducing advertising technology or data practices that materially change how personal information is handled, we will update our Privacy Policy and obtain consent where required.
We use service providers to operate, secure and host the website, as described in our Privacy Policy.
Public and private information
Urban Design Index is a public archive. Published photos, locations, titles, notes, comments, designer information, manufacturer information and product information may be visible to anyone.
Your email address, authentication information and internal account identifier are not displayed publicly.
Every submission is linked privately to the account that uploaded it. Contributors may choose whether their display identity appears publicly with a submission.
Selecting “Post Anonymously” hides the contributor’s identity from the public. It does not make the contributor anonymous to Urban Design Index. Anonymous submissions are published only under the CC0 1.0 Universal Public Domain Dedication.
Photos and storage
Uploaded photos are kept in a private object-storage system. Photos are processed into original, display and thumbnail versions.
Access to stored files is controlled through authenticated requests and short-lived signed links. Only the original uploader or an authorized administrator can replace or delete the stored files through the website’s management tools.
Image metadata that could identify the camera or contain precise embedded location information is removed before the image is stored.
Access controls
Database access is governed by row-level security policies.
Users can manage their own drafts, submissions, comments, likes and account information. Administrative actions are performed through protected functions that verify the administrator’s authorization.
Administrative access is limited to people who require it to operate, secure and moderate the archive.
Authentication
Authentication is provided through email and password or Google OAuth.
Urban Design Index does not receive or store your Google password. Email-password credentials are processed and securely stored by our authentication provider.
Authentication sessions are stored in your browser so that you can remain signed in.
Moderation and accountability
Urban Design Index may review, correct, restrict or remove submissions, comments and metadata that appear to:
- infringe copyright, privacy or other legal rights;
- contain knowingly false or misleading information;
- misidentify a designer, manufacturer, product or project;
- include unlawful, abusive, defamatory or harmful material;
- impersonate another person or organization;
- falsely suggest an endorsement, sponsorship or official affiliation;
- compromise the security or operation of the website; or
- violate the Terms of Use.
Urban Design Index maintains private records connecting submissions to contributor accounts. These records may be used to manage edits, investigate abuse, document licence selections, respond to legal claims and comply with valid legal requirements.
Security incidents
No online service can guarantee complete security.
Urban Design Index investigates suspected security incidents and takes reasonable steps to contain and correct them. We maintain records of privacy breaches and provide notices to affected individuals and regulators when required by law.
Responsible disclosure
Reporting a vulnerability
Please report suspected security vulnerabilities to founder.urbandesignindex@gmail.com.
Include enough information for us to understand and reproduce the issue. Do not access, modify, download or disclose information belonging to other users beyond what is reasonably necessary to demonstrate the vulnerability.
We will review good-faith reports as promptly as reasonably possible. We may acknowledge contributors who report valid vulnerabilities, with their permission.
Questions and related policies
For more information, review the Privacy Policy and Terms of Use.
For questions about security, privacy or the operation of the website, contact the Founder and Operator, Urban Design Index, at founder.urbandesignindex@gmail.com.