Privacy and cookies
This page explains what data andarama.com processes, why and with whom. It is written to be read, not to tick a box.
Who is responsible
José Luis Saorín Ferrer, author of Andarama, reachable at jl@joseluissaorin.com. Andarama is an open-source program (EUPL-1.2); andarama.com is the hosted instance he maintains.
Cookie-free analytics
To know how many people visit the site we use Plausible, a European service that sets no cookies, stores no IP addresses and does not identify anyone across visits. It counts page views and a few anonymous events (for example, that a tool was used). That is why there is no cookie banner: there is nothing to accept.
Tours published with Andarama carry the same kind of analytics: aggregated visits, scenes and hotspots, without cookies and without IPs.
Accounts and payments: Clerk
If you create an account on app.andarama.com, sign-up, sign-in and plan billing are handled by Clerk. Clerk stores your email, your name if you give it, your sign-in method and billing details; to keep you signed in it uses technical cookies, which are essential for the application to work. Tours, media and everything you create are stored in Andarama's own database, not in Clerk.
Infrastructure: Cloudflare
andarama.com is served from Cloudflare (Workers, D1, R2 and KV). Cloudflare processes requests as a data processor and may keep technical logs for a limited time for security. The media you upload is stored in R2, in European data centres whenever possible.
The free tools
The 360 viewer, the little planet maker and the cubemap converter run entirely in your browser. The images you open with them are not uploaded to any server: they never leave your computer. We only record, without identifying you, that the tool was used.
If you write from the contact form, your own email program opens: the message goes from your account to ours and is used only to reply to you. Accounts receive transactional email (verification, invitations, plan notices), never advertising.
Your rights
You can request access, rectification, erasure, portability and objection by writing to jl@joseluissaorin.com. Accounts can be deleted from within the application, and everything you create can be exported at any time as a ZIP or as an .andarama file. If you believe something is not being done right, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).
Changes
If this policy changes, the date is noted here. Last revision: September 2026.