Privacy notice

This notice explains what data the Salón Tricolor app uses, why, and for how long. We have kept it short and plain; if anything is unclear, just ask us.

Who is responsible

The Fundación Estadio Monumental de Caracas Simón Bolívar is responsible for the data in this app. MantizIS (mantizis.com) builds and runs the technology on the Foundation's behalf and uses the data only to make the app work.
For any question about your data, talk to the Salón Tricolor staff or write to the contact the museum publishes under Practical information (the "i" button in the app).

If you don't sign up

You can use the map, the zone pages, the audio guides and your card album without giving us any personal data. All of that is stored only on your phone.
The app does not use your camera, your location or your contacts: you read the QR codes in the hall with your phone's own camera, which simply opens the zone's page.

What we ask for and when

We only ask for data if you want to play the trivia, join a guide's group or save your visit. At that point we ask for two things: your name and your email. You can just use your first name or whatever you like to be called.
When you sign up we also keep:
• the app language and the version of this notice you accepted, with the date;
• your cards: which QR codes in the hall you scanned and when;
• your guide's group, if you are in one, and since when;
• your trivia game: which questions you got, what you answered, whether you were right, how long you took and your score;
• your shop coupon, if you earn one: its code, when it was issued, when it expires and whether it has been used;
• a fingerprint of a random code your phone creates. The code stays on your phone; the server only keeps an encrypted fingerprint (hash) of it, which holds no data about your phone and cannot be turned back into the code. It makes sure each trivia question and each coupon is used only once per phone.
We do not ask for ID documents, phone numbers, addresses, dates of birth or photos.

What we use it for

• To save today's visit and your cards, even if you switch screens or lose signal.
• To let your guide see the group and how everyone is doing.
• To run the trivia: show you questions you haven't seen, keep your score, build the rankings and assign the simulator places.
• To issue your shop coupon and make sure it is only used once.
• To recognise your email if you come back another day, without showing you anything from earlier visits.
• To stop abuse, for example lots of sign-ups in a row from the same place.
We do not use your data for advertising and we do not build profiles about you.
We don't send you any emails at the moment. If we later switch on the visit summary by email, we will update this notice and the app will ask you to accept it again.

What other people can see

• Other visitors: the trivia rankings (for your group and for the day) only show your short name, such as "Ana M.", with your score.
• Your guide: the name you entered, how many cards you have, your trivia score and position, and whether you get a simulator place. Your guide cannot see your email.
• The shop till: when checking your coupon, staff see the discount and whether it is still valid; if the museum has it switched on, they also see your short name and the time it was issued, so they can ask to see your album on your phone.
• Authorised museum and MantizIS staff can see the records, including your email, only to run the app and answer your requests.

What stays on your phone

The app keeps the following in your browser's storage:
• your card album and the name you give it, if you type one;
• if you signed up: your name, your email, today's visit code and your group, so we don't have to ask again;
• your phone's random code, a statistics code that changes every day, your language, the route you picked, your trivia and your coupon;
• anything waiting for signal to be sent (cards and statistics), for up to 12 hours;
• a copy of the pages and images, so the app works without signal.
For visitors, the app uses a single cookie, which remembers your language (it lasts one year). We do not use advertising or tracking cookies.
To delete it yourself:
• "Not you?" removes your sign-up from this phone and deletes today's visit from the server. If you have already played the trivia or received a coupon, the visit is closed instead and deleted within the usual period.
• "Empty album" deletes the cards on this phone.
• Clearing this site's data in your browser removes everything the app stored on your phone.

Your album image

When you tap "Download my album", the image is put together on your own phone with your cards, your name, your trivia and your coupon, if you have one. We never upload it: you decide whether to save or share it. We only count, anonymously, that it was downloaded or shared.

How long we keep your data

Each visit (name, cards, group and trivia) is deleted automatically: once 30 days have passed since you signed up, that night's clean-up removes it. Your email is deleted when it has no visits left.
For coupons, only a technical record remains, without your name or email: the code, the dates, the discount, whether it was used and the phone's encrypted fingerprint.
Anonymous statistics are kept for up to 400 days.
Copies may also remain in system backups, which are only used to restore the service if something goes wrong.

Statistics

We count how the app is used so we can improve it: for example, which zones are visited, in which language and at what time, whether the phone is an iPhone or Android, which ads are seen and how many coupons are used. They are anonymous: they carry no name, email or IP address, and each phone appears under a random code that changes every day. We do not use Google Analytics or any other third-party measurement tools.
To stop abuse, the server counts connections using an encrypted fingerprint of your IP address that is only used for one hour at most; your IP is not stored with your sign-up. As with any website, the hosting provider may log technical connection data, such as the IP address, in its own records.

Who we share it with

We do not sell or hand over your data. It is handled only by:
• MantizIS, which runs the app on the Foundation's behalf;
• SERED, the hosting provider where the app and its database run, together with its content delivery network. Its servers may be outside Venezuela.
Sponsors do not receive your data. If you tap an ad, you leave the app for the sponsor's page, which has its own rules.
We would only hand over data if a competent authority requires it under the law.

Children and teenagers

The map and the album can be used without signing up. If you are under 18, ask your mother, father or guardian for permission before signing up, and use only your first name. On school visits, follow your teacher's instructions.
If you are a parent or guardian and think a child in your care signed up without your permission, let us know and we will delete their data.

Security

The app uses an encrypted connection (https). Your visit code and your phone's code are stored on the server only as encrypted fingerprints, and only authorised staff with a username and password can access the admin area. No system is perfect, which is why we keep as little as possible, for as short a time as possible.

Your rights

At any time you can ask to see the data we hold about you, correct it or delete it, and withdraw your acceptance of this notice, in which case we will delete your data. To do so, talk to the Salón Tricolor staff or write to the contact listed under Practical information. To protect your data, we may ask you to write from the same email address you signed up with.
You can do several of these things yourself in the app: see "What stays on your phone".

Changes to this notice

The version and date of this notice are shown at the top. If we change it, the version goes up and the app will ask you to accept it again the next time you sign up or come back another day.