AURA
Sign inGet started
Updated 2026-09-30

Privacy policy

Template to be reviewed by a lawyer before launch. This document accurately describes how the product works but is not legal advice.

Data controller

Ulysse, publisher of AURA (private individual). For any request about your data (access, correction, deletion): support form, “Account” category. Data export and account deletion are also available directly in Account → Data. Hosting: Netlify (United States) and Supabase (database in Paris).

Data processed

  • Account (email, username, hashed password, date of birth, country, language) — contract performance and age protections.
  • Game (cards, transactions, trades, duels) — contract performance.
  • Security (sessions, sign-in IP, security events) — legitimate interest.
  • Payments (orders, receipts) — no card data stored by AURA.
  • First-party analytics without IP; anonymous ID only with consent.

Retention

Account: while active. Sessions: 30 days. Security events: 12 months. Orders: 10 years in anonymised form (accounting obligation).

Your rights

Access, rectification, erasure, portability (JSON export in Account → Data), objection. You may complain to the CNIL.

Cookies

  • aura_session — necessary (sign-in)
  • aura_locale — chosen language
  • aura_consent — stores your choice
  • aura_aid — anonymous analytics, only if you accept