Privacy Notice

1. Who We Are

AuroraMe (“we”, “us”) operates auroraforecast.uk and sells digital Premium Access packages.

Contact: privacy@aurorame.com · AuroraMe, Carrer de Pau Claris 138, 08009 Barcelona, Spain.

2. Merchant of Record

Payments are processed by Lemon Squeezy, Inc. acting as Merchant of Record. Paddle.net may be introduced later; the checkout page will always show the active provider.

3. Data We Collect

We collect only the data needed to sell digital content and keep the site secure.

• Purchase & account data: Name, email, billing country, IP address, order ID, amount, and product details supplied during checkout.
• Premium access tokens: Random tokens tied to your email and city slug so we can grant and verify access.
• Usage analytics: Aggregate Google Analytics 4 metrics (page views, device type, country) with IP anonymization.
• Support messages: Emails you send to support@aurorame.com.
• System logs: Webhook delivery logs and error traces used to secure the service (no card numbers).

4. How We Use Data (Legal Bases)

We rely on the following grounds under GDPR/UK GDPR and similar laws:

• Provide the service (contract): Process purchases, send receipts, grant Premium Access, and support your account.
• Comply with laws: Maintain accounting records, collect taxes, and respond to lawful requests.
• Legitimate interests: Prevent fraud, monitor abuse, and improve site reliability.
• Consent: EU/UK visitors provide consent before GA4 cookies load.

5. Cookies & Analytics

Essential cookies keep you signed in and store premium tokens. GA4 performance cookies only run after consent. See our Cookie Policy for details.

6. Sharing & Processors

We share data only with trusted providers under data processing agreements:

• Lemon Squeezy, Inc. (USA) – Merchant of Record, billing, fraud prevention, tax compliance.
• Google LLC – Google Analytics 4 with EU data region and IP anonymization.
• Firebase / Google Cloud – hosting, authentication, and Firestore storage in the EU region.
• Google Workspace (Gmail) – support mailbox and customer communication.
• Paddle.net – standby Merchant of Record (inactive at launch).

7. International Transfers

Data may be stored or processed in the EU and United States. Transfers rely on Standard Contractual Clauses plus encryption and access controls.

8. Your Rights

Depending on where you live you may have the right to:

• Access or receive a copy of your personal data.
• Correct inaccurate data.
• Request deletion when data is no longer needed or legally required.
• Object to or restrict processing based on legitimate interests.
• Withdraw cookie consent at any time.
• File a complaint with your supervisory authority.

9. Children

The web service is not intended for children under 13. If you believe a child provided data, contact us to delete it.

10. Data Security

We use HTTPS, role-based access, logging, and short retention periods for tokens and logs. No payment card data is stored on AuroraMe servers.

11. Changes

We may update this notice as we add processors or legal requirements change. The new version takes effect upon posting.

12. Contact

Email privacy@aurorame.com or mail AuroraMe Privacy, Carrer de Pau Claris 138, 08009 Barcelona, Spain. We answer privacy requests within 30 days.