Legal

Privacy policy

General approach

Argos Atlas is designed around the principle of data minimisation: the pages of this site can be read without registration and without providing identifiable personal data, and the map requires a free account whose processing is described below. This policy describes, in detail, the limited processing that may occur, the technologies used, the legal bases and the rights of users, so that the information is complete and verifiable.

Data we process

The pages of this site can be read without registration, and that use collects no directly identifiable data. Using the map requires a free account, which the paid ARGOS PRO features also require; what is processed in it is set out below under "The account, ARGOS AI, recordings and payments". The server logs minimal technical data (IP address, timestamp and requested resource, plus standard header data such as the user agent) for the purposes of ensuring security, preventing abuse and diagnosing incidents. These logs are kept for a limited period proportionate to those purposes, after which they are deleted or anonymised.

The account, ARGOS AI, recordings and payments

The account. Anyone can create a free account, and the paid features require one. That account is identified solely by your email address. You can sign in with a single-use link sent to that address or with your Google account, in which case Google tells us your email address and an identifier of your Google account, which we keep only to recognise you when you sign in again, and the first and last name of that account, which we keep only so that they are already filled in on the payment page if you buy a plan or a pass. The profile picture Google also offers is not kept. We do not ask you for a name, a phone number or an address. Alongside the email address we store the language you choose, the sign-up and last-access timestamps, and the record of what you accepted at sign-up (see "What you accept when you create the account").

Legal basis: performance of the contract (art. 6(1)(b) GDPR): without an email address there is no way to tell whose account or subscription is whose. Retention: sign-in links are deleted 24 hours after being used or expiring; closed or expired sessions after 90 days; the emails we send you are anonymised after 90 days, so what is kept is that they were sent, not to whom; the first and last name Google gives, for as long as the account exists, and they are deleted with it.

What you accept when you create the account. Sign-up has two different things, decided separately:

• The Terms and conditions are accepted by continuing with sign-up (with Google or with your email), as the line next to those buttons says: without that acceptance there is no contract and no account is created. Of that acceptance we store the date and the version of the document accepted, which is what makes it possible to know who has to be asked again the day they change. Legal basis: performance of the contract and compliance with a legal obligation to be able to evidence it (arts. 6(1)(b) and 6(1)(c) GDPR).
• The marketing communications are an optional box, which comes unticked, and ticking it or not changes nothing about your account or what you can use. Of it we store the state (yes or no) and the date of the last change. Legal basis: your consent (art. 6(1)(a) GDPR).

You can see both values in your account and withdraw the second with one click from that same screen or from the footer of any of those emails, as easily as it was given (art. 7(3) GDPR). Withdrawal has no retroactive effect on what has already been sent and affects neither your account nor your subscription.

The emails you receive. There are two classes, and the sending provider is Resend, acting as a processor: it receives your address and the message, and reports back the delivery status (delivered, bounced or marked as spam).

• Transactional: the sign-in link, the end-of-trial notice, changes to your subscription and notices about these documents. They are part of the service you asked for, they are sent for as long as your account is open and they carry no unsubscribe link: to stop receiving them you close the account. Legal basis: performance of the contract (art. 6(1)(b) GDPR).
• Marketing: product news. They are only sent with your express consent and all of them carry a one-click unsubscribe link, honoured immediately. To know whether the email was opened and which button was pressed, they carry a one-pixel image and their links go through our own server before reaching their destination; of that we keep only the fact (opened, which button, when), without your IP address or your browser, next to the record of the sending, and it is anonymised with it after 90 days or when you close your account. Legal basis: your consent (art. 6(1)(a) GDPR).

ARGOS AI. If you use ARGOS AI, your question and the map context you are looking at are sent to Anthropic, our large-language-model provider, in order to draft the answer. It processes them as a processor, solely to return the result, and does not use them to train its models. Your name and your email address are not sent.

Legal basis: performance of the contract (art. 6(1)(b) GDPR): ARGOS AI is one of the features you have subscribed to.

Camera recording. The cameras you mark for recording are kept in a rolling window whose length depends on your plan and on the kind of camera: snapshot cameras, 24 hours on every plan; video cameras, 12 hours on DISTRICT and 24 hours on DIVISION and AGENCY (the trial and OUTPOST do not record video). The oldest is deleted automatically as new material comes in. They are the same public images the camera already broadcasts, no facial or licence-plate recognition is applied to them, and no longer history is built.

Daily e-mail of the recordings. If you switch it on in your recordings panel, every morning we send to your address, through our e-mail provider, a video of the last 24 hours of each snapshot camera you record. The files prepared for that e-mail are deleted from our server after 3 days. You can switch it off at any time, from the panel or from the e-mail itself.

Legal basis: performance of the contract (art. 6(1)(b) GDPR).

Payments. Subscriptions and passes are handled by Freemius, which acts as merchant of record and as the party responsible for charging. Your card details never pass through our servers and we do not store them: they are collected and held by its payment gateway. To open the checkout we share your account's email address with it and, if you signed in with Google, the first and last name Google gave us, and its payment page is served from its own domain. For each purchase we receive the associated email address, the plan purchased and the status of the subscription, which is the minimum needed to give you access.

Retention: billing data is kept by the seller (Freemius) for the periods imposed by its accounting and tax obligations, and is governed by its own privacy policy.

Web analytics

If you give your consent, the service uses a web analytics solution self-hosted on the operator's own infrastructure (your data is not sent to third parties) to understand how the site is navigated and to improve the product. This analytics uses a first-party, persistent identifier: a random pseudonym generated in your browser and stored in its local storage (plus a first-party backup cookie), which does not contain your name or email and is not a covert device fingerprint. Its purpose is internal: to measure recurrence, retention and journeys over time in order to decide what to improve. People are not tracked across third-party websites and the IP address is not stored (it is used only transiently to derive the approximate country).

Legal basis: your consent (Art. 6(1)(a) GDPR), obtained through the site's consent mechanism before any identifier or event is generated; nothing is recorded until you accept. You can withdraw it at any time from the «Cookies» panel, which stops collection immediately.

Retention: identified analytics data is kept for a maximum of 24 months on a rolling basis, after which it is deleted.

Third parties: identified data is not shared. Should data products be produced for third parties, they receive only aggregated, statistical and non-identifiable information (anonymity thresholds, no identifiers), from which your individual activity cannot be reconstructed.

Cookies and similar technologies

The site uses the browser's local storage to remember the user's own preferences (for example, language, map settings, favourites or recent history); this is strictly functional storage that does not track the person and is not shared with third parties. No first-party tracking cookies are used. If you sign in to your account, a single first-party session cookie (sid) is also set, strictly necessary to keep you signed in across pages: it does not profile you, it is not shared, and it disappears when you sign out. Being indispensable to deliver a service you have requested, it does not require prior consent. Should third-party advertising be enabled (see the next section), those third parties may use cookies or identifiers subject to your prior consent, managed through the corresponding consent mechanism. You can configure or block storage from your browser options; disabling functional storage may affect the retention of your preferences.

Third-party advertising

The service may display, now or in the future, advertising provided by third-party networks, potentially including Google and its partners through Google AdSense. When such advertising is active, those providers may use cookies, device identifiers and similar technologies to serve ads, measure their performance and, where applicable and with your consent, personalise them based on your browsing. Processing carried out by those third parties is governed by their own privacy policies —in Google's case, those available at policies.google.com/technologies/partner-sites and policies.google.com/privacy—. Within the European Economic Area and equivalent jurisdictions, personalised advertising will only be served with consent obtained through a consent management platform; otherwise, non-personalised advertising may be shown. You may withdraw or change your consent at any time.

Rewarded video: who is involved when you accept advertising

Certain cameras may offer you the option to watch a video ad in order to keep viewing them, as an alternative to subscribing or buying a pass. That feature is provided by AppLixir (applixir.com), which acts as an advertising network and brokers demand from other buyers, including Google Ad Manager and the partners taking part in its auction.

Consent for that processing is managed through a consent management platform registered under the IAB TCF framework (Didomi), which collects your decision and passes it on to each provider. When you accept the advertising category in this site's cookie notice, that acceptance is passed on to that platform, which records it with the participating providers; the number of providers taking part in that auction is in the order of several hundred, and the full list, vendor by vendor, can be reviewed and changed in the consent panel itself, shown where the advertising is served. If you decline the advertising category, that refusal is passed on in the same way and no personalised advertising will be served.

To show an ad, a single-use identifier is sent to AppLixir, generated by us for that specific viewing. It contains no email address, no account identifier and nothing that could identify you: its only purpose is for their server to confirm to us that the ad was completed. No account or subscription information is sent to AppLixir. Processing carried out by AppLixir and its partners is governed by their own privacy policy.

If you have an active ARGOS PRO subscription or a running pass no advertising is shown to you, and those providers are therefore not involved.

Camera images

The cameras shown are traffic cameras, framed and resolved by public bodies so that, as a general rule, individuals and licence plates cannot be identified. Only already-public official feeds are served, at low resolution, with no additional processing whatsoever: no face or plate recognition is applied, no image history is built and only the latest frame served by the source is retained. If you nevertheless believe an image affects your privacy, you may request its review or removal at the contact address.

Legal bases

The processing of technical security logs relies on the operator's legitimate interest in protecting the service against abuse and failures. Web analytics with a first-party, persistent identifier relies on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Any personalised advertising and the use of non-functional third-party cookies likewise rely on the user's consent. Functional local storage relies on the provision of the requested service. The account, the subscription and transactional emails rely on performance of the contract (art. 6(1)(b) GDPR); the record of acceptance of the Terms also on compliance with a legal obligation (art. 6(1)(c) GDPR); and marketing communications rely solely on your express consent (art. 6(1)(a) GDPR), withdrawable in one click.

Retention and international transfers

Technical data is kept only for as long as strictly necessary for its purposes. Where analytics or advertising providers located outside the European Economic Area are involved, transfers will be made under adequacy decisions, standard contractual clauses or other safeguards provided for by applicable law.

User rights

To the extent that personal data is processed, you may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, without affecting the lawfulness of prior processing. Because the analytics uses a first-party identifier, your rights of access, portability and erasure over your analytics data are directly actionable: simply write to [email protected] quoting your identifier, or use the site's «forget my identifier» option, which regenerates it and unlinks your previous activity. You also have the right to lodge a complaint with the competent supervisory authority. Insofar as the service is directed at users in the European Union, Regulation (EU) 2016/679 (GDPR) applies.

Minors

The service is not specifically directed at minors and does not knowingly collect data from them.

Changes and contact

This policy may be updated to reflect technical, legal or operational changes; the version in force will always be the one published on this site. For any privacy matter or to exercise rights, the contact address of the operator is [email protected]. The operator's full registration details are provided to any party able to show a legitimate interest, and to competent authorities requesting them, upon request to that same address.