Privacy policy

If you're visiting a museum

You don't need an account to use a museum's guide. We don't use advertising or tracking cookies, and we don't build profiles of visitors.

Like any website, our hosting provider automatically records basic technical information when your phone loads a page, such as your IP address, browser type and the page requested. These logs are used to keep the service running and secure, and are kept only for a limited time.

If you work at a museum that uses Titulus

When you create a staff account we store:

• your name and email address;
• your password, stored only in a scrambled (hashed) form that we can't read, or, if you use “Continue with Google”, the name, email address and profile picture Google shares with us;
• sign-in sessions, including the IP address and browser they came from, so you stay signed in and we can spot misuse;
• which museums you belong to and your role there.

We also store what your museum adds: exhibit details, notes, photos, text and audio. Anything you publish is public, because visitors need to see it. Drafts and notes are visible only to your museum's staff.

Services that process data for us

• Vercel hosts the website.
• Neon hosts our database (accounts and museum content).
• Cloudflare runs our domain's DNS, stores photos and audio, and forwards email sent to hello@titulusguide.com.
• Anthropic writes AI drafts. When staff click “Draft with AI”, that exhibit's catalogue details and notes are sent to Anthropic's Claude API to produce a draft.
• Google provides “Continue with Google” sign-in and, when enabled, turns exhibit text into spoken audio.

These providers may process data in the United States and other countries. We share data with them only to run Titulus. We don't sell personal information or use it for advertising.

How long we keep it

Staff accounts and museum content are kept while the museum uses Titulus. Sign-in sessions expire on their own. Email us to have an account or a museum's content deleted.

Your choices

You can ask us for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing hello@titulusguide.com.

Children

Museum guides can be used by visitors of any age without an account. Staff accounts are for adults working with a museum, and we don't knowingly collect personal information from children.

Changes and contact

If we change how we handle information, we'll update this page and the date at the top. Questions: hello@titulusguide.com.