Privacy notice

Last updated: 1 November 2026

Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is the founding team of IARI Labs, Berlin, a company in formation (see our Impressum). You can reach us at info@iari.io for anything about your data.

Visiting this website

This website is delivered by a hosting and content delivery provider acting on our behalf. When you open a page, your browser sends it the technical data every web request carries: your IP address, the date and time, the page requested, and your browser and operating system. The provider keeps these server logs for a short time to run the service and to detect and block attacks; we do not combine them with other data.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in delivering the website securely and reliably. The provider may process this data outside the European Union; where it does, the safeguards of Chapter V GDPR apply (an adequacy decision, Art. 45, or standard contractual clauses, Art. 46).

The fonts, images and the videos at the top of the page are served from this website itself. Opening a page connects your browser to no one but the provider that delivers the site.

Visitor statistics

Like most websites, we track visits to learn how the site is used. We do this in two ways.

With your consent: if you press “Allow” in the banner, we record the pages viewed and for how long, the type of device and browser, the approximate region (derived from your IP address, which itself is not stored), how you reached us, and whether you played a video or used the contact form. For this, cookies are stored on your device (_ga and _ga_<ID>, for up to two years) so that a repeat visit can be told from a new one. The statistics service that processes this data for us may do so outside the European Union, under the safeguards of Chapter V GDPR. We keep the data for 2 months. Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without it, no such code is loaded and no such cookie is set. You can withdraw your consent at any time with “Cookie settings” at the bottom of every page; declining deletes these cookies on our domain and stops any further collection.

Without cookies: independently of the banner, a cookieless statistics service counts page views and measures how fast the pages load. It stores nothing on your device, uses no cookie or other identifier, and does not keep your IP address, so it cannot recognise you across visits. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in knowing how many people read the site and whether it loads well.

Videos from YouTube

Our videos are hosted on YouTube, a service of Google Ireland Limited. Until you press play, the page shows only a still image stored on our own server and nothing is loaded from YouTube. When you press play, the video is loaded from youtube-nocookie.com: Google then receives your IP address and the page you are on, and YouTube may store cookies or similar data on your device and process data in the USA (EU-U.S. Data Privacy Framework).

Legal basis: your consent, given by pressing play after the notice below the videos, Art. 6(1)(a) GDPR and § 25(1) TDDDG. See Google's privacy policy.

IARI Live: the camera on your phone

IARI Live (www.iari.io/live/) is loaded from this website like any other page (see Visiting this website). It then connects straight from your browser to the camera address you enter, normally a device on your own local network. The picture, the sound map and the classifier's results travel from that device to your browser and never to us. Chrome asks whether this page may reach devices on your local network; you can withdraw that permission in the site settings. The app keeps the last camera address and your display choice in your browser's local storage, only so that you need not enter them again; they are not sent to us, and clearing the site's data deletes them. The app sets no cookies and contacts no third party.

Legal basis: storing the address in your browser is strictly necessary for the function you asked for (§ 25(2) no. 2 TDDDG); we do not process the stream between your browser and the camera.

E-mail and the contact form

The contact form sends nothing by itself: it opens your own e-mail program with the message prepared, and you decide whether to send it. When you write to info@iari.io, we process your message and contact details to answer you and, where it applies, to prepare a pilot or another cooperation.

Legal basis: Art. 6(1)(b) GDPR (steps before a contract) or Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries). Our e-mail is hosted by Google Workspace (Google Ireland Limited) as our processor under a data processing agreement; Google may process data in the USA (EU-U.S. Data Privacy Framework). We delete your messages when they are no longer needed, unless a statutory retention period applies.

LinkedIn

The footer links to our LinkedIn page. It is a plain link: nothing is loaded from LinkedIn until you click it, and LinkedIn's own privacy policy applies there.

Your rights

• Access to your data (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).
• Objection to processing based on our legitimate interests (Art. 21 GDPR).
• Withdrawal of a consent at any time, with effect for the future (Art. 7(3) GDPR).
• A complaint to a supervisory authority (Art. 77 GDPR), for example the one responsible for us: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, datenschutz-berlin.de.

Write to info@iari.io to use these rights. We make no automated decisions and do no profiling. You do not have to give us any personal data, but without your IP address the site cannot be delivered to you.

Changes

We update this notice when the website or the law changes; the date at the top is the current version.