Privacy Policy

This explains what AuraMarket collects when you use AuraMarket, why, and what you can do about it. Short version: we collect what we need to run the game, we don't sell your data, and we don't run ads or third-party trackers.

What we collect

• Account details: your email address, username, display name, bio and avatar choices, and when you confirmed you're 13 or older.
• What you do in the game: markets you create, calls you make, your Aura balance and history, streaks, league results, follows, blocks, circle memberships, comments, and reports you file.
• Technical data: your IP address and basic request information, used to prevent abuse (for example, limiting how many sign-in codes can be requested) and kept in short-lived server logs.

We don't ask for your real name, phone number, location, contacts or payment details.

What's public

Your username, display name, avatar, bio, league tier and leaderboard position are public. So are markets you create in the public feed, your comments on them, and the calls you make on public markets (they show in market activity and holder lists). Anything inside a circle is visible only to that circle's members. Your email is never shown to other people.

How we use it

• To run AuraMarket: sign you in, keep score, settle markets and run leagues.
• To send you emails: sign-in codes, and (if you leave them on) results and streak reminders. We don't send marketing.
• To keep people safe: filtering and reviewing content, handling reports, and preventing spam, cheating and abuse.

Services we use

We share data only with the providers that run AuraMarket for us, and only what they need:

• Fly.io hosts the app (servers in the United States).
• Supabase hosts our database (Amazon Web Services, United States).
• Resend sends our emails, so it receives your email address and the message.
• OpenAI screens the text of new markets and comments for harmful content. Only that text is sent, not your email or profile, and it isn't used to train their models.

We may also share information if the law requires it, or to protect someone's safety.

Cookies

We use one cookie to keep you signed in and a short-lived one while you finish signing up. Your browser may also remember small preferences, like dismissing the "install the app" banner. No advertising or analytics cookies.

Teens

AuraMarket is for people 13 and older. We don't knowingly collect information from anyone under 13. If we learn an account belongs to someone under 13, we'll delete it. Parents or guardians can contact us at support@auramarket.app.

Your choices

• Edit your profile and change your email in Settings.
• Turn result and streak emails on or off in Settings, or from the unsubscribe link in any email.
• Delete your account in Settings. We erase your email, username and profile, hide your comments, and keep only anonymous game records so other people's markets still add up.
• Want a copy of your data, or have a privacy question? Email support@auramarket.app. Depending on where you live, you may have additional rights, and we'll honor them.

Keeping data safe and how long we keep it

Data is encrypted in transit, sign-in codes are stored only as one-way hashes, and access to our systems is limited. We keep your account data until you delete it. Sign-in codes expire after 10 minutes and server logs are kept only briefly.

Changes

If we change this policy in a meaningful way, we'll let you know in the app or by email before it takes effect. Questions: support@auramarket.app.