ARnocular
ARnocular app
ARnocular uses location and camera access to create an augmented tour experience. Our tour apps also collect pseudonymous usage, location and diagnostic records. Providing an email address for photo delivery is optional. The details below distinguish app data from website advertising measurement.
Last updated: October 18, 2026ARnocular is designed to help guests see relevant tour content around them through a heads-up display style experience. ARnocular LTD operates the tour apps and the services described here.
We do not sell personal information. Our purpose for app analytics is to understand aggregate tour usage, improve the experience and diagnose problems, not to profile individual riders for advertising. Aggregate dashboard reports do not mean that the underlying records are anonymous.
The app creates a random persistent installation identifier and records sessions, timestamps, city, app version, device and operating-system information, setup and permission outcomes, story playback, mode changes, durations, ratings and optional feedback. Error, performance and diagnostic records help us investigate failures. These records can be associated with the same installation across sessions.
These are pseudonymous records, not a signed-in personal account. Pseudonymous does not mean anonymous: location, timestamps and service request identifiers can make records linkable.
ARnocular may use your device location to understand what is near you and to display relevant tour content, landmark information, recommendations, and visual overlays connected to your surroundings.
With location permission, the app uses precise device coordinates to locate you along the route and place stories. Location samples and route-related events are also transmitted and retained with the installation's usage records for tour analytics and troubleshooting; this is not only temporary processing on the phone. We do not use these app records to build individual advertising profiles.
ARnocular may use your device camera to show the real-world background and place visual tour content over it, creating a heads-up display or augmented reality style experience.
The current Frankfurt app uses local image-target recognition. We do not upload or retain its live camera frames, personal photos or videos for this feature. Downloaded tour imagery and narration are content we provide, not photos or audio recordings collected from you.
The app may load route-specific content, points of interest, visual layers, and recommendations related to the tour route or the user's surroundings. This content is provided to make the sightseeing experience more useful, visual, and memorable.
We use the app records described above to measure activation, story listening, tour duration, feature usage and reliability, including aggregated product reports. The underlying pseudonymous records remain stored off the device and can be reviewed when investigating a problem. The current app does not provide an in-app switch to disable all operational analytics.
If you choose Send my photos, we collect the email address you enter, a delivery request identifier, city and rating information to process and send the requested photo-collection link. Our delivery services, including Zapier and the email provider, process that request. Frankfurt photo delivery is not entry into a prize draw. You can skip this step and continue the tour without giving an email address.
We do not put the email address itself in the tour analytics payload. However, delivery request identifiers can currently associate an email request with pseudonymous usage and location records. We do not claim that email and location are technically unlinked. Optional written feedback is also collected; please do not include sensitive personal information in it.
When website measurement is on, we also retain a private event receipt in Google Firebase in Toronto, Canada, to check delivery independently of delayed analytics reports. Receipts include event and server-received times, a random event ID, campaign/ad tags and fixed interaction details. For each page opening, a temporary page-view ID groups periodic foreground-time, elapsed-time and scroll-depth snapshots; it is not reused to identify a visitor across page openings. Hidden-tab time is excluded from foreground time. They do not store raw advertising click references, names, emails, IP addresses, browser identification headers or analytics cookies. Test receipts are separated from production. Receipts are scheduled for deletion after 30 days; deletion processing may take additional time. A receipt confirms arrival at our server, not a purchase or acceptance by Google Analytics.
We also use Google Analytics on the Toronto Essentials marketing page to report visits and the interactions listed below by campaign and advertisement. It uses analytics cookies to distinguish browsers and sessions, and receives event times, a page address with query strings removed, campaign/ad tags and fixed interaction details such as gallery/image identifiers or audio language. Google receives ordinary technical connection information when the browser contacts its service. We do not send Google names, email addresses, booking/payment details, precise device location, or OpenAI's opaque click references. Google advertising storage, Google Signals and advertising personalization are disabled for this integration. See Google's privacy information.
The same Measurement settings choice controls Google Analytics and our OpenAI measurement. A saved opt-out or Global Privacy Control prevents Google Analytics from starting. Turning measurement off stops future analytics events and clears this integration's analytics cookies where the browser permits it; it cannot recall events already delivered. Campaign/ad tags identify an advertisement, not a confirmed booking. Reports may be incomplete because of privacy choices, browser blocking or delivery failures.
On our Toronto Essentials webpage, advertising measurement for our ChatGPT advertisements is on by default unless you turn it off or your browser sends Global Privacy Control. Our server sends OpenAI page visits, successful story-sample plays, manual interactions with the More ways to see the city and Places to explore galleries, image-enlargement link clicks, map opens and zooms, audio-language changes and outbound clicks to Viator. A booking click is measured as a click, not as a purchase or confirmed booking.
These events include their time, a random event identifier, the tour page address, fixed gallery/image identifiers or the selected audio language where relevant, and, when present, an advertising click reference. A click reference may connect an event with an advertising interaction, so this measurement is not fully anonymous. We do not include names, email addresses, booking or payment details, device-location coordinates, your IP address or browser identification headers in the events sent to OpenAI. We do not load OpenAI's browser advertising pixel for this integration or scan forms for customer information.
You can turn measurement off through Measurement settings in the webpage footer or notice. We remember a saved opt-out in this browser until you change it or clear site data; saved on choices last up to 180 days. If a lasting choice cannot be saved, we keep an opt-out for the current visit where browser storage permits it. Measurement stays off when saved choices cannot be safely read or neither storage option is available. Turning it off does not prevent you from listening to samples or using booking links. It stops future events but cannot recall events already delivered. We respect the browser's Global Privacy Control signal by keeping this measurement off. Our hosting provider still processes normal website requests, including technical connection information needed to serve the page. OpenAI processes delivered measurement data under its applicable privacy and advertising terms.
We use Google Firebase and Google Cloud for app records and diagnostics, and hosting and email services for operation and requested photo delivery. Information is transmitted using encrypted HTTPS connections. Technical providers receive connection information needed to operate their services.
The Vuforia Engine AR SDK also sends technical device and application information, feature/lifecycle events and IP-derived country information to PTC and its service providers for operating and improving their software and services. This is distinct from our aggregate product reporting. See Vuforia statistics and PTC privacy information. Services may process information outside your country.
You can control camera and location permissions through your device settings. Some ARnocular features may not work as intended if camera or location access is disabled, because those permissions are needed to show relevant visual content over the world around you. Withdrawing permission stops future access to that device capability; it does not delete records already transmitted. You may decline photo email delivery or optional feedback without losing access to the tour.
Operational, usage, feedback and delivery records are retained in our services rather than processed only in memory. We do not promise automatic deletion within 90 days. Removing the app or clearing local data does not by itself delete server-side records. Contact us below about access, correction or deletion requests; identifying the relevant pseudonymous records may require information about your app session or photo-delivery request. We assess requests and any applicable legal retention requirements before confirming what can be removed.
If you have questions about this Privacy Policy or ARnocular's privacy practices, contact us at nima@arnocular.com.