Privacy
What we record, and why
Updated 18 October 2026
This page covers sonoreum.com, the audio guides we run for museums, and Studio, where museum staff build them. The short version: as a visitor you don't create an account and we never ask for your name or email; in Studio you sign in, so we know your email address; and we never sell anything we record or use it for advertising.
Who we are
Sonoreum makes audio guides for museums. It's run by Yassine Gayl. For anything on this page, write to hello@sonoreum.com.
On sonoreum.com
We count visits with Cloudflare Web Analytics, which sets no cookies and doesn't follow you to other sites, and with Google Analytics. If you visit from the European Union, the United Kingdom or Switzerland, Google Analytics runs without cookies and without identifying you; elsewhere it sets a cookie to recognise a returning browser. We also use PostHog to see how the site is used: the pages you open, what you click, and a recording of how you move through each page (session replay). PostHog sets a cookie to recognise a returning browser and keeps an approximate location (country and city) worked out from your IP address, never the address itself. It doesn't run at all on a device set to a time zone in the European Union, the United Kingdom or Switzerland. We don't use any of it for advertising. If you write to us, we keep the conversation so we can answer you.
In a museum's audio guide
You open the guide by scanning the QR code at the museum. Here's what we record while you use it:
- what you open and play: the tour, each stop, when you start, pause and stop listening, and how far into it you got;
- the language you choose, and the language your phone is set to;
- your phone's timezone, the time of day, and the size of your screen;
- two random numbers, one for your visit and one for your phone, so we can count visitors without knowing who they are;
- when you scan the museum's QR code, the type of phone and browser you used;
- ratings and comments, only if you leave them. Please don't put personal details in a comment.
Your phone also keeps a few things in its browser storage so the guide works: your progress, your language, today's access from the QR code, and the random numbers above. Clearing your browser's data removes them.
From your first tap, the guide also sends what's listed above to PostHog, with a recording of what happens on your screen while you use it (session replay), so we can see where the guide is hard to use. PostHog keeps its own random number in your browser (a cookie) to recognise it.
We don't store your IP address with any of this. PostHog uses it to work out an approximate location (country and city), then discards it. Like every website, our servers see it when your phone loads a page, and it can appear in the technical logs we keep for security.
In Studio
Studio (studio.sonoreum.com) is where a museum's staff build and publish their audio guide. You sign in with an email address and a password, by invitation or by creating an account, so here we know who you are. We keep your email address, your organisation and your role in it, and what you do in Studio: the pages you open, the tours and stops you open, edit, play, translate and publish, and the invitations you send. The record says that a stop was edited or a tour published, not what you wrote; the narrations themselves are your museum's content and stay in its workspace.
Studio sends this to PostHog under your account as soon as it loads, with a recording of what happens on your screen (session replay), so we can see where Studio is hard to use and help you when something fails. Text you type into a field is masked in the recording; what's already on the screen, such as a stop's title, is visible. As on the rest of the site, PostHog works out an approximate location from your IP address, then discards it.
Why we record it
- To run the guide: remember where you are and which language you chose, and let the museum's QR code unlock it.
- To give the museum statistics about how its guide is used. Museums see totals only, such as the number of visitors or how many finished a stop, never a single visit. Groups of fewer than three visitors are merged.
- To improve our guides.
- To see how the museums we work with use Studio, and to help them when something fails.
We do this on the basis of our legitimate interest, and the museum's, in running the guide and Studio and understanding how they're used.
Who handles it for us
- Hetzner runs our servers, in Germany.
- Supabase hosts our database, in Frankfurt, Germany.
- Cloudflare delivers images, counts visits to sonoreum.com and routes our email.
- Google counts visits to sonoreum.com (Google Analytics) and, with Resend, sends and receives our email (Gmail).
- PostHog records how sonoreum.com, the audio guides and Studio are used (analytics and session replay), in the United States.
Some of them may process data outside your country, including in the United States.
How long we keep it
We keep what the guide records for 24 months, then delete it, and the same for what Studio records about your use. Session replays are deleted after 30 days. Statistics made from it, which contain totals and no single visit, may be kept longer. Your Studio account stays while your organisation uses Sonoreum, or until you ask us to delete it.
Your rights
In a museum's guide we don't know who you are, so we can only find your visit with the random number stored on your phone: write to hello@sonoreum.com to ask what we hold or to have it deleted, and we'll help you find it. In Studio we know you by your email address: write from it and we'll show you or delete what we hold. You can also complain to the data protection authority where you live.
Changes
If what we record changes, we'll update this page and the date at the top.