Privacy Policy

Data controller

The controller for personal data processed through auroramile.com is the operator of auroramile.com. Contact: [email protected].

What your account holds

Item	Why	Retention
Nickname	Naming you in the game	Until you delete the account
Email address	Identifying the account so you can log back in	Until you delete the account
Password hash	Letting you log in without us ever holding the password	Until you delete the account
Sign-up date	Support and abuse handling	Until you delete the account
Google account identifier	Only if you chose to sign in with Google, so we recognise you next time	Until you delete the account

There is nothing beyond that table. No legal name, no address, no birth date, no phone number and no card details at any point, because this site has nothing to sell you. Your password exists here only as a hash that cannot be turned back. We hold it all to provide the account you asked for and for no other reason. Deleting the account from your account page wipes the lot at once, with no waiting period.

What stays in your browser

Item	Purpose	Retention
Coin balance, level, missions, game settings	Continuing your game	Until you clear browser data
Age confirmation	Not asking again on every page	Until you clear browser data
Cookie choice	Remembering your consent	Until you clear browser data

Everything listed here lives on the device you are using and is never transmitted to us.

If you sign in with Google

You never have to use Google here - the email form does the same work. If you do use it, Google puts the request in front of you to approve, then passes back three things and only three: a permanent identifier for the account, your email address, and your first name, offered to you as a starting nickname. We request nothing further: no contacts, no calendar, no Drive, no profile photo, no authority to act for you. We never see your Google password. What happens at Google's end is covered by Google's own privacy policy.

We hold the identifier, the email address and the nickname you confirm - that is the whole record. Deleting the account removes all three on the spot. You may also take our access away at any time from "Third-party apps with account access" in your Google account, after which you sign in with an email address and password and nothing else changes. No Google script runs here, so nothing is sent to Google unless you press the Google button. Lawful basis: performance of a contract.

Google tags (only with consent)

Choosing "Accept all" loads Google Analytics and Google Ads tags. They count visits and record whether an advert turned into play, such as a first spin being taken. Google is sent your IP address, device details and those events. Choosing "Essential only" keeps the tags in consent mode instead, with no cookies and no advertising identifiers. Lawful basis: consent.

Logs kept by the host

Standard web-server request logs are retained briefly by our host for security purposes. Basis: legitimate interests.

What we will not do with it

No card or payment details are ever taken, because nothing is for sale.
No promotional email arrives unless you asked for it.
We do not sell your data, rent it, or pass it on for money.
No gambling operator receives anything from us, and no affiliate links exist here.

Your rights over this data

You are entitled to access what we hold, to have it corrected or deleted, to restrict or object to how it is processed, and to withdraw consent whenever you like. Deleting your account erases the account records immediately, and clearing this site's data in your browser removes everything else. You can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.