Privacy note

Short version: almost nothing

The museum keeps per-room counters and nothing that identifies you. There are no analytics scripts, no advertising, no third-party embeds, and no tracking cookies.

Stored on the server

For each exhibit the museum increments three numbers: visits started, visits that waited to the end, and a running record of wait durations used to compute a median. Durations are rounded and clamped before storage. Requests are rate limited by a short-lived in-memory counter keyed on a hash of your address, which is never written to disk.

Stored in your browser

Your passport, meaning the list of rooms you have completed and how long you waited, lives in local storage under a single key. Your sound and motion preferences live beside it. The server never receives any of it. Clearing site data, or using the erase button on the passport page, removes it permanently.

Not stored anywhere

No accounts, no email addresses, no IP addresses at rest, no device fingerprints, no cross-site identifiers, no session recordings.

Requests to the museum

The web server keeps standard operational logs for a short period so that outages can be diagnosed. Those logs are not joined to exhibit counters and are not used to build profiles.

Changes

If this note ever changes materially, the change will be described here rather than silently applied. A museum about honesty regarding time should be honest about data.