Privacy Policy

Last updated: September 23, 2026

Summary

Aurora processes pages on your device and collects anonymous product usage statistics. If you choose to send a site bug report, Aurora receives the reported page URL, an optional screenshot and note, and settings and device details. Aurora does not use IDFA or track you across other apps.

This policy explains exactly what is collected, what is not, and how to opt out.

What we collect

Anonymous product usage events via TelemetryDeck, a privacy-first analytics service. The events tell us which features users reach and where they get stuck during onboarding so we can fix what's broken.

The events are:

  • App launches (count and timestamp)
  • Onboarding step viewed / completed / skipped
  • Safari extension enable / disable detection
  • Paywall viewed / dismissed
  • Purchase completed / failed (no payment details, just outcome)
  • App version and a randomly generated install ID (UUID, regenerated on every reinstall)

What usage analytics do NOT collect:

  • No browsing history, URLs, or page contents through usage analytics. Optional site reports are described below.
  • No theme contents or custom theme designs
  • No personal identifiers — no Apple ID, no email, no name
  • No IDFA (Apple's advertising identifier)
  • No device fingerprint or hardware identifiers
  • No location, contacts, photos, or any other on-device data
  • No tracking across other apps or websites
  • No data shared with advertisers or data brokers

Analytics provider — TelemetryDeck

Aurora uses TelemetryDeck exclusively for analytics. TelemetryDeck is a Swiss-based, GDPR-compliant analytics service designed for privacy-conscious apps. Their key properties:

  • No IDFA, no cookies, no cross-app tracking
  • Data hashed before transmission
  • Stored in Switzerland under Swiss data protection law
  • Does not sell or share data with third parties

See their privacy policy: telemetrydeck.com/privacy.

Because no IDFA or cross-app tracking is involved, Aurora does not show an App Tracking Transparency (ATT) prompt on iOS — none is required.

What's stored on your device

Aurora stores the following locally in UserDefaults and an App Group container shared between the iOS app, the Safari extension, and the Control Center widget. These preferences stay on your device except for the limited settings you choose to include when sending a site report.

  • Your theme list (default + custom themes you create)
  • Pro / trial status (from StoreKit)
  • Trial start date (used to compute days remaining)
  • Whitelist / Blacklist site rules
  • Auto Schedule preferences (on/off times per day of week)
  • Integration usage counters (custom themes created count, schedule-used flag) — used by the in-app "trial ended" paywall to remind you what you set up

Notifications

Aurora schedules up to 3 local notifications during your 3-day trial — reminders on days 2, 3, and 4. These are local notifications scheduled by iOS on your device. No push notification token is registered. No server is involved. The notifications are cancelled the moment you purchase Pro.

What the Safari extension sees

The Safari Web Extension reads each page’s CSS to apply dark mode styles locally and communicates with Aurora’s host app to synchronize preferences. Normal page styling does not send browsing information to Aurora. Only when you choose Send report does the extension transmit the site report described below.

Site bug reports (opt-in)

You can report a rendering problem from Aurora’s Safari popup. Nothing is uploaded until you press Send report. Review the screenshot for private information and remove it if you prefer. Screenshots and notes may contain personal information you include, and URL paths may identify page content.

  • The current page’s origin and path and its hostname. URL credentials, query strings and fragments are removed.
  • The issue categories you select, your optional note (up to 1,000 characters), and one optional screenshot of the visible page.
  • Platform, operating-system version, Aurora version, device model (not a unique device identifier), and popup language.
  • Whether dark mode and the site rule are enabled; active theme name, brightness, contrast, blue-light filter, image dimming, font family and font scale.
  • Trial-ended state, site-rule mode, system appearance, screenshot dimensions and size, and capture or upload error codes.
  • A random report ID and submission timestamp. No account, email, install ID, or browsing-history list is attached.

Reports are sent directly to Supabase in US East (Northern Virginia) for diagnosing and fixing rendering problems. Screenshots are stored in a private bucket. Reports are not linked to a user identity or used for tracking or advertising. We retain reports and associated screenshots for up to 12 months, then delete them. A screenshot upload that succeeds before a report fails may remain as an unattached file until cleanup.

Apple's role

Aurora uses Apple's StoreKit framework for in-app purchases and subscriptions. Apple processes the transaction; Aurora only sees the active/inactive status of your purchase or subscription — never your payment details. Apple's privacy policy governs your transaction data.

Third parties

TelemetryDeck handles anonymous product usage events. Supabase stores optional site bug reports and screenshots, as described above.

That's it. No advertising networks. No crash reporting services other than Apple's standard channels. No data brokers. No social media SDKs. No marketing attribution services.

Changes to this policy

If this policy changes — for example, if a future version of Aurora adds an opt-in feature requiring data collection — the change will be announced in the app's release notes and on this page. The "Last updated" date above will reflect the change. We'll never quietly start collecting data.

Contact

Questions about this policy? Email danny.ng.it@gmail.com.