Your enquiry and visit information

The demo form prepares an email containing the name, email address, organisation and message you enter. When no form service is connected, it opens your email app and you send the message yourself. If a form service is enabled, the submit button sends the enquiry to that service. We use the information received to respond to your enquiry.

No visitor account is required. In the browser, your language, chosen museum, listening progress and similar settings stay on your device and are not sent to mitos. The browser may also keep a copy of the last collection so it can still be read during a connection problem. If you choose to save a museum for offline use, the browser also keeps its pages, images and recordings in your language on your device. You can remove this information through your browser’s site data settings. In the Android app, once it is available, saved stories, language and museum will stay on the phone; uninstalling the app or clearing its data in Android removes them all.

Finding a nearby museum uses your location only when requested. QR scanning uses the camera only while the scan screen is open, and the image is processed on your device. In the Android app, once it is available, Bluetooth exhibit discovery will be optional and will pause when the app goes into the background. For visitors, coordinates and Bluetooth readings are processed on the device; mitos does not keep them as a history or send them to its server. The only exception is a beacon check by museum staff, described under curator tools. You can continue browsing manually.

The guide requests published collections, images and recordings from the services hosting them. These connections carry technical information, such as your IP address, needed to deliver the content. Sign-language videos are hosted on Vimeo or YouTube and load only when you press play; from then on that provider receives your IP address and device details under its own privacy policy. The same applies when you open an external link. This website includes no analytics or advertising cookies of its own.

Museum administrators sign in to a separate workspace. When they request a translation or voice recording, for one exhibit or many at once, the saved exhibit title, description and medium are sent to Anthropic for translation, and the narration text to ElevenLabs for voice. When they request automatic floor plan reading, the floor plan image is sent to Anthropic. Translation and voice results stay private drafts until a curator approves them, and unapproved drafts expire after 30 days. Floor plan results stay a draft until saved. When staff check a beacon with the Android app's field tool, the phone sends the signal strength it measured to the admin workspace, where it is kept in that beacon's check history with the email of the curator who issued the field code. These actions do not send visitor locations or preferences to those providers.

For each curator account we store the email address, role, museum, and the password only as a password hash. A sign-in cookie keeps the session. The audit history records which email made each change, and failed sign-ins are counted briefly by IP address and email to protect against attacks. Audit history is kept until the platform owner sets a retention period; by default it is not removed automatically. For access or deletion requests, contact info@formato.company.