Privacy

What we collect, and what we don't.

Last updated 25 October 2026

Curious is run by Josxph Limited (company number 15145694, England and Wales), trading as Curious. This policy covers two things: this website, and the Curious visitor guide that zoos and aquariums run for their visitors.

This website

Cookies. Reading this site sets none. If you sign in to the dashboard, we set one strictly necessary cookie, curious_session, which keeps you signed in for up to 12 hours and is deleted when you sign out. Your browser also keeps your sign-in for those 12 hours so it works across tabs. Nothing is used for advertising or tracking.
Cloudflare Web Analytics. Fonts, scripts and images are served from our own domain, apart from Cloudflare Web Analytics, which counts page views without cookies and without identifying you. There is no advertising pixel and no social-media widget on this site.
The live counter. The homepage asks our own analytics service for one number, the total of visitor page views across the platform. Nothing about you is sent with that request.
The contact form. What you type (your name, e-mail, message, and your site and phone number if you add them) is sent to us as an e-mail through Resend, an e-mail delivery service, and lands in our mailbox. We keep it there so we can reply and follow up; it is not stored in any other database. Ask and we will delete it.
Help centre feedback. When you answer “Was this helpful?” on a guide, or search the help centre and nothing matches, we store your answer, any message you type and the words you searched for, with the date, so we can improve the guides. If you answer No and add a message, it is also sent to us as an e-mail. We do not store your name, e-mail address, venue or internet address with it. We delete the stored answers after 13 months. Messages e-mailed to us stay in our mailbox until you ask us to delete them, like contact-form messages.
Hosting. The site is served by Cloudflare, which keeps the short-lived technical logs any web host keeps, such as the address a request came from, to run and protect the service.

The Curious visitor guide

When a site runs Curious, its visitors scan a code and open a website in their own browser. Curious processes that data on the site's behalf: the site is the controller and we are the processor. Visitors never create an account and are never asked for a name or an e-mail address.

Page views. Each page opened is recorded with the time, the exhibit or animal it belongs to, the browser's preferred language, the device type and brand, the browser and operating system, and the country. Network (IP) addresses are not stored. These records produce the site's Insights, which are aggregate: how many visitors, how long they stay, which exhibits and languages, and when the site is busiest.
A returning-visitor cookie. The guide sets a first-party cookie called curious_visitor containing a random identifier, kept for 13 months, so the site can count returning visitors and so a visitor's badges and trail survive between visits. It holds no personal details.
Badges, trails and progress are stored on the visitor's own phone, with a copy held on our servers under the same random identifier so they survive a phone clearing its storage.
Quiz answers, upvotes, survey responses and experience clicks are recorded against the same random identifier, never a name. Experience clicks also record the device, like page views. A survey stores exactly what the visitor chooses to write.
Cloudflare Web Analytics. The guide also loads Cloudflare Web Analytics, which counts page views without cookies and without identifying the visitor.
Guide Pass. If a site sells passes, the payment is taken by Stripe for the site, on the site’s own Stripe account and under Stripe’s terms: the site is the seller, and we never see card details. We keep the pass itself: a random pass number, its short code, the price, the dates it runs and Stripe’s reference for the payment, linked to the same random identifier. A pass never carries a name or an e-mail address. The pass is also kept on the visitor’s phone, so the guide opens without asking again.
Appeals. If a site runs an appeal, donations are taken by Stripe for the site, on the site’s own Stripe account and under Stripe’s terms, and we never see card details. We keep the amount, the date, the page it was given on and Stripe’s reference for the payment, and nothing that identifies the donor. If a donor asks for a receipt, their e-mail address goes to Stripe, not to us.
Short links. When a printed short link is scanned, the scan is recorded in the same way as a page view before the visitor is sent on.
Languages. If a site offers its guide in other languages, the visitor’s choice is remembered on their own phone. The guide is translated before visitors see it, so nothing a visitor does is ever sent for translation.

Sites that sign up

When a site creates an account we keep the name, e-mail address, site name and company name given at sign-up, and the password, stored only as a scrambled hash. We use them to run the account and to contact the site about it, and a copy of the sign-up details is e-mailed to us through Resend. Payments are taken by Stripe, which handles the card details under its own terms; we never see or store them. Account details are deleted within 60 days of the subscription ending, apart from the invoice records the law requires us to keep.

Where it lives and how long

Curious runs on Cloudflare's network, and its databases are Cloudflare D1. The databases and stored files are held in Cloudflare's UK and EU locations. Records are kept while the site subscribes, so it can compare visits, quizzes and feedback across the years. Each site can choose to anonymise records older than 2, 3 or 5 years, so they can no longer be linked to a visitor (written survey comments older than that are deleted), and can ask us to delete any of its data. A site's content, records and analytics are deleted within 60 days of its subscription ending. Contact-form e-mails stay in our mailbox until you ask us to delete them.

Who processes it for us

Cloudflare: hosting, databases, file storage and network security, for everything above.
Resend: sending e-mail (account e-mails, reports and contact-form messages). Resend processes e-mail in the United States, under the UK’s International Data Transfer Addendum to the Standard Contractual Clauses and the UK extension to the EU–US Data Privacy Framework.
Stripe: subscription payments, under Stripe’s own terms. We never see or store card details.

Each has a data processing agreement with us and independent security certification (ISO 27001 or SOC 2). We give sites 30 days’ notice before adding or replacing one.

Translation. When a site turns a language on, the guide’s own text (exhibit and animal descriptions, quizzes, and the guide’s buttons and headings) is translated by Anthropic’s Claude. Only that text is sent: never visitor data or account details, and sites are asked not to put personal details in it. Anthropic processes it in the United States under its commercial terms and does not use it to train its models.

Your rights

You can ask us what we hold about you, ask for it to be corrected or deleted, or object to how it is used, by e-mailing hello@get-curio.us. We answer within a month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

When this policy changes, the date at the top changes with it. Sites are told by e-mail.

Controller: Josxph Limited, trading as Curious, company number 15145694, England and Wales (for this website); the site, for its visitor guide
Contact: hello@get-curio.us