Artlas · Updated 8 September 2026

Privacy policy

No account, advertising, payments or tracking analytics. Your wishlist, trips, dates, visited marks and precise live position stay on your device.

Who operates Artlas

Artlas is operated by Do Duc Anh, the independent developer behind Cresendo, Causaa and Rheusk. For privacy questions and requests, contact hello@cresendo.org.

What stays on your device

Artlas stores your wishlist, trip names, travel dates, stop order, assigned days, visited marks and current daily-game token in application or browser storage. This is necessary to provide saving and resume features. There is no automatic account synchronization. Browser storage, device backups and shared-device access are controlled by your device and browser settings.

Location is your choice

We request device location only when you choose “Use my location” in Near me. Location updates stop when you leave that screen, open a place’s details, or the app becomes inactive. We request foreground location only and do not maintain a location history. Distances are calculated on your device. You can choose a destination manually, decline permission, or revoke it in system settings.

Maps load tiles for the area you view from OpenStreetMap. The map provider receives your IP address and requested tile coordinates, which indicate the viewed area and can relate to your location. We do not send it your saved trip, live location marker or daily guesses. Read the OpenStreetMap Foundation privacy policy. External directions and museum links open a separate provider; that provider receives the destination you choose and applies its own policy.

What the service processes

• Daily play: an anonymous random session identifier, the edition, submitted city guesses and the session creation time. The server stores only a hash of the session token. The token on your device allows you to resume or delete that session.
• Correction reports: artwork identifier, category, message and timestamp. Please avoid including personal information in a report.
• Service operation: network addresses and request information are processed to deliver the website, prevent abuse and keep the service working. Short-lived hashed network identifiers support rate limits. Application access logging is disabled; infrastructure providers may process their own security logs.

Purposes and legal bases

Local storage and daily sessions provide the features you request. Where applicable, we process this information to provide the service under our terms. Optional device location uses your permission and can be withdrawn. Security and abuse prevention rely on our legitimate interest in running a reliable service. Correction reports are used to maintain accurate content and respond to the report.

Hosting and recipients

The service is hosted on Hetzner infrastructure in Germany. Artlas’s database and application services are separated from Causaa and Rheusk. Public artwork images are served with Artlas from copies credited to their sources. OpenStreetMap serves maps. Apple and Google provide their respective distribution services when a mobile version is installed. We do not sell personal information or use it for targeted advertising.

Retention

Local travel data stays until you delete it, clear application storage or remove the app. Daily server sessions are removed after eight days by scheduled maintenance; you can delete the current session earlier in Settings. Rate-limit records expire within two hours and are removed by maintenance. Correction reports are retained for up to 90 days for editorial review. Operational backups follow a 14-day rolling retention; a deleted record may remain in a protected backup until it expires.

Your choices and rights

Settings lets you export travel data, restore a backup, and delete saved data. Deleting the current daily server session needs a connection. Artlas has no accounts to close. An exported backup belongs to you and may include private travel dates: choose where you share it carefully.

Depending on applicable law, you may request access, correction, erasure, restriction, portability, or object to certain processing. You may also complain to your local data-protection authority. Contact us using the address above. Because daily sessions are anonymous, keep the relevant session information on your device if you need us to identify one; do not post its token publicly.

Children and changes

The service is intended for a general audience and is not directed to children under 13. We do not knowingly ask children for personal information. Material policy changes will be dated here and reflected in the app when relevant.