Privacy Policy

Who we are

Octivaro is a cocktail bar discovery platform operated as a personal project. The app is available at octivaro.app. When we say "we", "us", or "our" in this policy, we mean the individual behind Octivaro.

What we collect

Octivaro is designed to work without requiring you to create an account or provide personal information. We collect as little data as possible:

• City preference – stored as a cookie on your device so we remember which city you last browsed. No personal data is sent to our servers.
• Favourites and collections – stored locally in your browser (localStorage). This data never leaves your device.
• Venue reports – if you submit a correction or report about a venue, we receive the content of that report. We do not require your name or email to submit one.

What we do not collect

• We do not collect your name, email address, or any account credentials.
• We do not use analytics or tracking scripts.
• We do not serve advertisements.
• We do not sell, share, or transfer any data to third parties.
• We do not track your location. If you use the "Get me to the start" feature on a guide, your browser may request location access – this is handled entirely by your browser and is never sent to our servers.

Cookies

We use a single functional cookie to store your city preference. This is not a tracking cookie and contains no personal information. No third-party cookies are set by Octivaro.

Third-party services

Octivaro uses the following external services to function:

• OpenStreetMap / CARTO – map tiles are loaded from these providers when you view the map. Their standard terms and privacy policies apply to tile requests.
• Google Fonts – web fonts (EB Garamond, Manrope, Material Symbols) are loaded from Google's CDN.
• Transport for London (TfL) – if you use transport features in London, live data is fetched from TfL's open API.

We do not control what data these services collect through their own infrastructure. We encourage you to review their respective privacy policies.

Data storage and security

Our servers are hosted on Google Cloud Platform (Cloud Run) within the EU. We use HTTPS for all connections. Since we collect minimal data, there is very little to protect – but we take reasonable measures to keep our infrastructure secure.

Your rights

Under UK GDPR, you have the right to access, correct, or request deletion of any personal data we hold. In practice, we hold almost none – but if you have submitted a venue report and would like it removed, please get in touch.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. We will not introduce tracking, advertising, or data sharing without updating this policy first.

Contact

If you have any questions about this policy or how your data is handled, please reach out via the contact details on our About page.