PRIVACY & DATA PROTECTION

How the SU TANGO Demonstrator Platform handles data. Last reviewed 10 October 2026.

Who we are

This platform is the demonstrator layer of TANGO, a project funded by the European Union's Horizon programme (Grant No. 101120763), operated by Swansea University and partners.

What we process

The platform has no accounts and asks for no personal details. To make the site work it processes only technical data:

  • “TANGO User” visitors (OAuth): your access token is stored only in a signed, HttpOnly cookie in your browser — never in the platform's database. It proxies your requests to the TANGO APIs and expires with the token itself.
  • Guest visitors: a session cookie links you to a server-side session holding the demonstrator's own (machine) credential and your current demonstration state (e.g. the last few API calls in the on-page diagnostic log).
  • Server logs: standard request logs, kept per the deployment's retention policy. The platform does not log your token.
What we don't do
  • No analytics, advertising, or cross-site tracking.
  • No third-party scripts or font/CDN requests — every asset is served from this platform, so your IP address is not shared with third parties while you browse.
  • No real personal data in the AI demonstrations: all datasets shown (hand-written digits, loan applications, personas) are synthetic or public research data.
  • Visual Reasoning responses remain in your browser and are not submitted to or retained by this platform.
Cookies

All cookies used are strictly necessary for the requested functionality: the session cookie, the OAuth token cookie for TANGO members, and a CSRF-protection cookie. No consent banner is required because no non-essential cookies are set.

Retention

Logging out removes the browser token cookie. Database-backed sessions expire under Django's session policy and expired rows are cleared at most once each day by the application. Server logs follow the retention schedule of the hosting deployment.

Your rights & contact

Under the GDPR you may request access to, correction of, or deletion of personal data. Because this platform stores no identifying data, most requests can be satisfied simply by logging out and clearing your browser cookies. For anything else, contact the TANGO demonstrator team at Swansea University.