Privacy Policy
Last updated: November 2026. Template text — have it reviewed by counsel for your jurisdiction before launch.
What we collect
- Account data: email address, optional name, and a salted bcrypt hash of your password (we never store the password itself).
- Content: panorama images, tour settings, hotspot text and URLs you provide.
- Usage data: an aggregate view counter per tour. We do not track individual viewers, and we do not use advertising or analytics cookies.
- Technical data: IP addresses are used transiently for rate limiting and abuse prevention.
Cookies
We set one strictly necessary, HTTP-only session cookie when you sign in. Viewers of public tours receive no cookies.
How we use data
To operate the service, secure it, and communicate with you about your account. We do not sell personal data.
Processors
We use infrastructure providers to host the application, database and file storage. They process data on our behalf under their data-processing terms.
Your rights (including GDPR)
You can access, correct and export your data by contacting us, and you can delete your account and all associated data at any time from the console. Deleted tours and images are removed from our systems.
Retention
Data is kept while your account is active and deleted when you remove it, apart from short-lived backups.