Privacy

What we store

You do not need to sign up to play. On your first visit we create an anonymous profile with a made-up name and leave a cookie in your browser so we recognise you when you come back. That is what holds your streak and your Aura.

We store: the name and emoji you pick, the Aura you have given, the places you gave it to, your streak, the approximate country and city you connect from, and your IP address.

What the IP address is for

Two things. First, showing you your city's ranking the moment you arrive, without asking for location permission. Second, catching cheating: someone making a hundred accounts to farm more leaves the same trail. The IP-to-city lookup happens on our own server against a downloaded database; the address is never sent to anyone else.

Payments

Payments are processed by PayPal. We never see or store your card details. For each purchase we keep the amount, the date, the identifier PayPal returns, and the email you paid with, because we need those to fix a problem if one comes up.

Who else sees this

Your name, emoji, Aura and the places you back are public — they appear in the rankings. Your email, IP address and payment details never appear anywhere public.

We do not sell data to anyone. There are no third-party ads. There are no social network trackers.

For how long

The anonymous profile and its cookie last one year from your last visit; if you do not come back in that time, they are deleted. The raw IP address is kept for at most 90 days, which is what catching cheating requires; after that only the country and city remain. For purchases, the IP address is also deleted after 90 days; the rest is kept for at least five years, as accounting rules require.

Who is responsible and what you can ask

The person responsible for this data is Leonardo Meléndez, who runs AuraCity, at corporacionlemez@gmail.com. You can ask for a copy of what we hold about you, have it corrected or deleted, or object to our using it, and we answer within a month. The legal basis is that the data is needed for the game to work (the profile, the streak, the Aura) and our legitimate interest in keeping the game fair (the IP address). If you are in the European Union and believe we have not handled your request properly, you can complain to your country's data protection authority.

Deleting your data

Write to us and we delete your profile and everything tied to it. Aura you gave to a place stays on that place's score, because removing it would change a public ranking other people are part of — but it is no longer linked to you.

Contact: corporacionlemez@gmail.com