Security

Encryption in transit

All traffic between the website and panel and our cloud backend is encrypted over HTTPS/TLS. Data such as account details, tour templates, and statistics is never sent across the network in plain text.

DURING a tour, the system is offline by design. The guide's phone acts as a server on the local WiFi network; participants scan a QR code and connect over the local network using http/ws. That traffic stays on the local network and does not go to the internet. Audio and participant interactions remain on the local network the tour runs on, so tour data is kept on your devices and within the local network by default. The single exception is live translation, which the guide turns on explicitly: while it is active the guide's own voice is streamed to our backend and to Google Gemini for real-time translation.

Authentication

Panel sessions are managed with a short-lived access token and a longer-lived refresh token. The access token is held in memory, and sessions are kept alive through silent refresh.

Optional two-factor authentication (2FA / TOTP) is available on accounts. When enabled, you sign in with a one-time code from your authenticator app in addition to your password.

Access control and role-based permissions

Organization (company) accounts use role-based authorization. Owner, manager, and member roles carry different permissions, so each user can only access the data and actions their role allows.

Invitations, role changes, and member management are performed by authorized roles. This keeps company data and statistics visible only to the people who should see them.

Data minimization and no third-party tracking

We collect only the data needed to provide the service. We avoid asking for more than necessary and keep what we collect tied to specific purposes.

The site runs no third-party tracking or analytics. Your browser stores a strictly-necessary authentication token and your cookie-consent choice (localStorage: dw_refresh, dw_consent); and, if you arrive through a campaign or referral link, first-party campaign attribution (dw_attr_first, dw_attr_last) used to measure which campaign led to a sign-up. There are no third-party advertising pixels, fingerprinting, or cross-site trackers.

Controls over your account

You can change your password from the panel at any time.

You can log out of all devices to end every active session in a single action, which is useful if you lose a device or notice anything suspicious.

You can delete your account from the panel, and you can request a copy of your data to be exported.

Reporting a security issue

If you discover a security vulnerability or anything suspicious, please report the details to [email protected]. We will review your report and respond within a reasonable time.

We ask good-faith researchers to work with us under responsible disclosure: contact us before publishing a finding and allow a reasonable window for a fix.

Certifications and details

This page describes only the measures we have in place today; we do not claim any certification we do not hold. Formal security certifications and a detailed security whitepaper can be shared on request and are in progress.

For vendor assessments, procurement, or compliance reviews, reach us at [email protected].