What stays private.
What gets published.
Camera
Camera access starts only after you press Open camera and grant browser permission. Full camera frames and EXIF metadata are not uploaded as part of normal scanning.
Wall relocalization
Publishing uploads compact grayscale landmark templates derived from the framed wall. They remain available to the creator. Other viewers receive them only when the creator explicitly approves exact public recovery for that artwork.
Location and recovery sensors
Location permission is requested only when a feature needs it, such as nearby discovery or publishing. Public discovery is approximate by default. If you approve an exact public destination pin, viewers receive that artwork’s exact saved location and wall fingerprint. For that exact-recovery choice only, ISPRAY stores one bounded sensor snapshot containing compass heading, heading accuracy, device orientation, and camera dimensions—not live sensor history—and exact-public viewers receive it with the artwork to guide their return.
Creator accounts
Your public display name and handle can appear with published artwork. Email, phone, password data, and sign-in-provider identifiers remain private. Passwords are salted and hashed; Google credentials are verified by the server and are not stored in browser-readable storage.
Necessary storage
A secure rotating cookie keeps you signed in. Local browser storage remembers the current identity reference, first-run guide state, and unfinished local art. ISPRAY does not use advertising cookies.
Your choices
You can deny camera or location permission, sign out, clear browser data, or choose not to publish. Denying a permission limits only the features that need it.