PLAIN LANGUAGE · ACCOUNTS AND PAYMENTS
PRIVACY POLICY
Last updated: August 26, 2026
WHAT THIS COVERS
This policy covers the live AURA service: accounts, public profiles, voting and rankings, challenges, Royal features, The Throne, and the technical systems that operate them.
PUBLIC PRODUCT DATA
Public profiles, votes, rankings, challenges, ruler status, and visible Royal Messages are public. Public-figure entries are clearly identified and are not registered participant accounts. Profile names, usernames, biographies, avatars, scores, and product activity may therefore be visible and shareable.
ACCOUNTS, PROFILES, AND STORAGE
Supabase provides authentication and stores account records, profiles, votes, rankings, challenges, moderation records, Throne records, and uploaded profile images. Account sign-in supports email and password and, when configured, Google. Authentication cookies keep signed-in sessions working.
ANONYMOUS VOTER IDENTITY
For voting without an account, we store a random anonymous voter identifier in a secure HTTP-only cookie. The service hashes that identifier for vote tallying and combines it with request network information before hashing for rate-limit checks. This supports persistence, duplicate-vote controls, cooldowns, and abuse prevention without presenting the voter as a public account.
RATE LIMITS, CACHES, AND LOGS
Upstash supports rate limiting, cooldowns, and non-authoritative caches when configured. The application also processes limited product events and standard technical request logs to operate, secure, and diagnose the service. These records do not include complete card numbers, Stripe secrets, or raw payment-provider payloads.
PAYMENTS, REFUNDS, AND DISPUTES
Stripe Checkout processes payment and billing information under Stripe's own privacy terms. We do not receive or store complete card numbers. AURA stores provider references, currency, integer-cent amounts, payment status, and signed event results so verified payments, refunds and disputes can update The Throne accurately.
RETENTION AND MODERATION
Product records are kept as needed to provide the service, enforce limits, investigate abuse, and maintain accurate financial and webhook histories. Hidden or deactivated profiles are removed from public ranking visibility, while moderation, payment, refund, dispute, and idempotency records may be retained where operationally or legally necessary.
CONTACT
Privacy questions may be sent to support@the-throne.lol.