Privacy Policy
Your camera, your phone, your choice
The short version: your camera image never leaves your device, visiting needs no account, and there is no advertising or tracking.
At a glance
- The camera image is processed on your phone and is never uploaded, recorded or stored by Exe.Vision.
- Visitors do not create accounts or give us any personal information.
- No advertising, no analytics, no tracking cookies, and no selling or sharing of personal information.
- The only personal information we hold belongs to exhibition staff who sign in to manage content.
- You control what is saved on your device through Privacy settings.
Who we are
Exe.Vision is operated by the Exe.Vision team, based in [to be confirmed: country]. We decide how the limited information described here is used, and we are responsible for it. You can reach us at [to be confirmed: contact email].
The camera
The augmented-reality experience uses your device's camera to recognise the artwork in front of you. That recognition happens entirely on your device. No image or video from your camera is uploaded, recorded or stored, by us or anyone else.
Your browser asks for camera permission only when you tap Start the camera. Recognition pauses while the page is in the background, and the camera is released when you leave the viewer. You can withdraw camera permission at any time in your browser's settings, and you can explore every artwork without a camera.
Information about visitors
Visiting Exe.Vision does not require an account, a name, an email address or any other personal information. We do not collect any directly.
Like every website, some technical information is processed so that pages can reach you:
- Connection details. Our hosting provider and Cloudflare, which deliver and protect the site, receive your IP address, browser type and the pages requested, and may keep them in short-lived server logs for security and to keep the service running. We rely on our legitimate interest in operating a secure website.
- Fonts. The Satoshi typeface is loaded from Fontshare, so Fontshare receives the same connection details when a page loads.
- Exhibition content. Artwork information is loaded from Google Firebase. These requests carry connection details but no information about who you are.
We do not use this information to identify you, build a profile, or follow you across other websites.
Information about staff
Exhibition staff who manage content sign in at an address that is not linked from the public site. For these accounts we hold:
- an email address, a display name, a role and an account identifier, used to sign in and to check permissions;
- invitations sent to staff email addresses, until they are accepted, withdrawn or deleted;
- an activity log of changes made (for example publishing an artwork or changing someone's role), recording the account and email address, the action and the time. The log cannot be edited or deleted from the dashboard, because it exists to keep the exhibition's history trustworthy;
- a sign-in session stored in the browser used, until the staff member signs out.
We use this information to run the exhibition and keep it secure, which is necessary for staff to do their work. Staff should not upload images or recordings that identify other people, or contain personal information, without those people's permission.
What is stored on your device
Exe.Vision uses no advertising or analytics cookies. It stores only what it needs to work: your privacy choice, and pages and artworks you have opened so they keep working offline. The Cookie Policy lists every item, why it is there and how long it lasts. You can delete all of it from Privacy settings.
If we ever want to use optional technologies such as analytics, they will stay off until you allow them, and you will be asked first. We also honour the Global Privacy Control signal sent by some browsers.
Service providers
A few providers process information on our behalf, only to deliver the service:
| Provider | What they do | Information involved |
|---|---|---|
| Google Firebase | Stores exhibition content, site settings and staff accounts; sends staff sign-in emails | Connection details; staff email and activity |
| bot-hosting.net | Hosts the website and uploaded files | Connection details |
| Cloudflare | Delivers the site securely and protects it from abuse | Connection details |
| Fontshare (Indian Type Foundry) | Supplies the Satoshi typeface | Connection details |
Some of these providers operate servers outside [to be confirmed: country], so information may be processed in other countries. They are bound by their own security and privacy commitments. We do not sell or share personal information for advertising.
How long information is kept
- Camera images: never kept.
- Connection details: held briefly by our providers under their own retention policies.
- Staff accounts: until the account is removed.
- Activity log: for as long as the exhibition's records are kept.
- Data on your device: until it expires, you delete it, or you clear your browser's site data. See the Cookie Policy.
Your rights
Depending on where you live, you may have the right to:
- be told what personal information we hold about you, and get a copy;
- have inaccurate information corrected;
- have information deleted, or its use restricted, where the law allows;
- object to how we use it;
- withdraw consent at any time, where we rely on it;
- complain to a data protection authority: [to be confirmed: data protection authority].
To use any of these rights, email [to be confirmed: contact email]. We will reply within the time the law requires. Because visitors give us no personal information, we usually hold nothing that could identify a visitor.
Children
Exe.Vision is suitable for all ages and collects no personal information from visitors of any age. Children should use the AR experience with an adult nearby, as described in the Terms of Use.
Security
Your browser connects to the site over encrypted HTTPS. Staff actions require a verified sign-in and a role that no one can grant themselves, and access is checked on every change. No method of storing or sending information is perfectly secure, but we work to protect what we hold.
Changes to this policy
If this policy changes, we will update the effective date above. If a change affects what is stored on your device or needs your consent, we will ask you again the next time you visit.
Contact
Questions or requests about privacy: [to be confirmed: contact email].