Privacy information

Account and browser sessions

We store your email address, a protected password hash and browser session records to provide account access, signed-in download history and reviews. Essential cookies keep you signed in and protect account actions. You can view and revoke your browser sessions from your account.

When you choose the full or simple website, a preference cookie remembers that choice for up to one year. Choose “Automatic view” to clear it and let the website select a view for your browser and screen size.

Downloads and reviews

Public downloads do not require an account. The Store records the release, transfer status and completion time for download statistics. Anonymous transfers are not linked to a Store account. Signed-in download history records files delivered by the Store. It does not record whether you installed an application. Ratings and reviews are linked to your account. Written reviews are checked before publication, and public reviews display “Aurora user” rather than your email address.

Automatic app heartbeat

Aurora apps automatically report activity while running, including in the background. No Store account or pairing code is required. Reports contain random device and installation IDs, app and library versions, device family, system version, screen dimensions, app uptime and activity events about every five minutes. The device ID is shared between Aurora apps on the same phone to estimate distinct active devices.

The server records when it receives each event and the connection IP address. An approximate country may be derived from that address. A country estimate is not an exact location, and a recent event does not guarantee that the device is connected right now.

Heartbeat reporting does not collect GPS coordinates, IMEI, contacts, file names, shared folder paths or a list of running processes. Reports are not linked to your Store account. Closing all Aurora apps stops application heartbeat activity.

Access and retention

Authorized staff can view heartbeat activity and device information. Only the Store owner can view a recent connection IP, and that access is recorded. Raw heartbeat IP addresses are hidden after seven days and removed by scheduled cleanup. Heartbeat events are retained for 30 days; cumulative event counts may remain after individual events are removed. Country summaries show the approximate origins of active devices.

Expired pairing codes and browser sessions are removed by scheduled cleanup. Account, review, download and audit records are retained until reviewed and removed by the Aurora Store team, including when handling a deletion request.

Shared files and relay connections

Aurora Store does not receive the files you share through Aurora Share. Local sharing connects your phone and browser directly. When you choose a relay, that relay processes the connection and transfers; review the selected server and share only files you intend to make available.

Account messages

Your email address is used for account recovery messages. Recovery links grant access to your account, so keep them private and use only links you requested.

Your controls and requests

From your account you can revoke browser sessions, request an export of your information or request deletion. The Aurora Store team reviews these requests. Submitting a request records it for review; it does not immediately export or delete your data. You can check the request status in your account.