Privacy at Aura AQ
Privacy Policy.
This policy explains how 21CNCSTUDIO LTD handles personal information when you use aura-aq.com, Aura Account, the Web Installer and connected Aura Link services. It also explains cookies, local browser storage and the choices available to you.
Last updated:
We use information to provide the account, installer and connected services you choose.
Diagnostic logs remain in your browser unless you download and share them.
We do not sell personal information or build advertising profiles.
Who we are
Aura AQ is a 21CNCStudio project.
Aura AQ was created by Volodymyr Papush. The website, Aura Account, Web Installer and connected Aura Link services are operated by 21CNCSTUDIO LTD. For the personal information covered by this policy, 21CNCSTUDIO LTD is the controller. This means the company decides how and why that information is used.
21CNCSTUDIO LTDCompany number 14359920Registered in England and WalesRegistered office: 44 Gardeners Walk, Elmswell, Bury St Edmunds, United Kingdom, IP30 9ETcontact@21cncstudio.comThis policy covers aura-aq.com, Aura Account, the Web Installer and Aura Link features connected to the same account. External websites and services have their own privacy notices.
Information we collect
What we collect for Aura services.
Account and identity
Clerk user identifier, verified email address, display name, sign-in method, verification state and session security data.
Access and installer activity
Account membership and role, product access grants, backer-code redemption, quota profile, and the time, product and mode of installer access or firmware requests.
Aura Link service data
Site, room and device names, configured location, device model, firmware and settings, air-quality readings, events, alerts, reports and notification preferences when you use Aura Link.
Messages and preferences
Topics you select, the notice version and time of your choice, notification destinations and delivery status, plus information you include when contacting support.
Technical and security data
Request identifiers, limited request and browser details, IP address and user agent in security records, and hashed identifiers used to enforce access limits and prevent abuse.
Billing, if enabled
Stripe customer and subscription identifiers, plan and payment status. Card details stay with Stripe and are not stored by 21CNCSTUDIO LTD.
Most information comes directly from you, from your devices, or from Clerk when you sign in. Technical information comes from normal service requests. An account owner may also provide your email when inviting you to an Aura Link account.
A verified email is required for signed-in account features. Device and location data is collected only when you connect or configure those features. Optional email topics remain off until you select them.
Why we use it
Why we use your information.
Provide the service
We use account, access, installer and Aura Link information to provide the features you request. Depending on the feature, we rely on contract where processing is necessary to deliver an agreed service, or on our legitimate interests in providing and administering the service.
Keep Aura secure and reliable
We use security logs, access records, quotas, aggregated page-use data and performance data for our legitimate interests in preventing abuse, protecting users, supporting the service and improving its reliability and usability.
Send optional updates
We use your verified email for release, project or blog updates only with your consent. You can withdraw that consent at any time.
Meet legal obligations
We retain or disclose information where necessary to comply with tax, accounting, court-order and data-protection obligations. We handle fraud prevention and service security under our legitimate interests or another applicable lawful basis.
Aura services apply rules to create alerts, enforce installer quotas and control account access. We do not use automated processing to make decisions that have a legal or similarly significant effect on you.
Who receives information
Providers that help operate Aura.
We share only the information needed for a provider to perform its role. The main providers are listed below.
Clerk
Account identity and session securityClerk handles sign-in, account profile information, verification and session security. 21CNCStudio does not receive your password.
Clerk privacy informationVercel
Hosting, delivery and service performanceVercel hosts and delivers the web services and processes technical request data. The public aura-aq.com site uses Vercel Web Analytics for aggregated page-use measurements. Aura Link uses Web Analytics and Speed Insights under its separate analytics preference.
Vercel privacy informationNeon
Managed database infrastructureNeon provides the PostgreSQL infrastructure used by Aura Link for account, access, preference, device and service records.
Neon privacy informationResend
Email deliveryResend may deliver operational Aura Link notifications when you enable an email notification endpoint. Delivery records can include status and error information.
Resend privacy informationStripe
Hosted billing, when paid services are enabledIf a paid Aura service is offered, Stripe hosts checkout and billing management. 21CNCSTUDIO LTD keeps customer and subscription references, amounts, currency, invoice and subscription status, and limited webhook records, but does not receive full card details.
Stripe privacy informationIf you enable an Aura Link notification channel, the alert information needed for delivery is sent to the destination you choose, such as browser push, Discord, Telegram, Microsoft Teams or a webhook. If you enable outdoor conditions, configured coordinates are sent to Open-Meteo to obtain local weather and air-quality context.
We do not sell personal information. We may disclose information where required by law, to protect users or the service, or as part of a genuine business reorganisation subject to appropriate safeguards.
International transfers
Some providers operate outside the UK.
Some service providers and notification destinations may process information outside the UK. Where a restricted transfer occurs, 21CNCSTUDIO LTD relies on an applicable adequacy regulation or another lawful transfer mechanism, such as the UK International Data Transfer Agreement or UK Addendum, as set out in the relevant provider agreement.
You can email contact@21cncstudio.com to ask for information about the safeguard that applies to your data.
How long we keep information
How long we keep each type of information.
Account and accessService record- Kept for
- While the account or product access remains active
- Afterwards
- Only while needed to complete deletion, prevent abuse, resolve disputes or meet legal obligations; otherwise it is deleted or anonymised
Aura Link telemetryScheduled deletion- Receipts
- Up to 7 days
- Raw data
- Up to 30 days
- Summaries
- 90 days for 5-minute data and 730 days for hourly data
Security and auditNormally 180 days- Used for
- Security review, abuse prevention and accountability
- Exceptions
- Relevant records may be kept longer for an active investigation, dispute or legal requirement
Email choicesYour control- Preferences
- While needed to apply and demonstrate your current choice
- Opt-out
- We may keep your email address on a suppression list after you opt out so we can honour that choice
Analytics choiceYour control- Account preference
- While your account exists, or until you change the choice
- Browser opt-out
- Up to one year, or until you turn analytics back on
Providers may keep limited backup or security copies for their own documented retention periods. When an exact period is not fixed, we use the shortest period reasonably needed for the purpose, legal obligations, security and the resolution of disputes.
Cookies and local storage
What this site stores in your browser.
Clerk authentication cookiesEssential- Used for
- Sign-in, session continuity and account security
- Examples
__sessionand__client_uat- Duration
- Depends on your session and sign-in flow
aura-aq-serial-logsLocal feature- Used for
- Keeping Serial Monitor history through a device restart
- Stored in
- IndexedDB in this browser only
- Duration
- Up to 72 hours
aura_link_analytics_opt_outPrivacy choice- Used for
- Keeping optional Aura Link analytics switched off in this browser
- Stored in
- HttpOnly cookie on link.aura-aq.com
- Duration
- Up to one year, or until you turn analytics back on
aura_aq_locale_preferenceLanguage preference- Used for
- Opening the public homepage in the language you explicitly selected
- Stored in
- Local storage in this browser only
- Duration
- Treated as expired after one year and removed on your next visit, or earlier if you choose another language or clear site data
We use Clerk storage for sign-in and account security. Serial Monitor storage starts when you choose to use the monitor. Aura Link sets its opt-out cookie only after you turn analytics off. The public aura-aq.com site stores a language preference only after you choose a language. That preference remains in this browser and is not connected to an Aura Account. The public site uses cookie-free Vercel Web Analytics as described below, but does not use advertising or marketing cookies. The Aura Link analytics preference and opt-out cookie apply only to link.aura-aq.com.
Use your browser's site settings for aura-aq.com and link.aura-aq.com to view or clear stored data. Clearing account cookies signs you out. Clearing IndexedDB removes saved Serial Monitor sessions, so download any log you need first. Use Aura Link's Privacy & data setting to change the preference saved with your account.
Serial Monitor
Your diagnostic log stays on this device.
Aura AQ does not upload the serial log. For each Aura Account, the monitor keeps up to 2 sessions, with a maximum of 10 MB per session and 20 MB in total.
You decide whether to download and share a log. Aura AQ sanitises the exported file, but you should review it before sending it to anyone.
Service analytics
No advertising profiles or cross-site tracking.
The public aura-aq.com site uses Vercel Web Analytics to measure page views and traffic sources. Aura Link uses Web Analytics and Speed Insights under its separate Privacy & data setting. Neither service is used to build advertising profiles or follow visitors across unrelated websites.
Vercel states that Web Analytics records anonymous, aggregated page-view data without cookies. It can include the page path, referrer, approximate location such as country, region and city, browser, device type and operating system. A daily visitor hash is reset after 24 hours. Analytics data is available for the reporting period under the active Vercel plan and is then handled under Vercel's retention policy. Aura Link's separate Speed Insights measurement processes browser performance data such as Core Web Vitals.
On aura-aq.com, measurements from sign-in, sign-up, account, onboarding and private blog-preview routes are filtered before they are sent. Query strings and URL fragments are removed from the measured page URL. We also record limited custom events when a visitor selects an Aura AQ Link demo, Discord or Web Installer link. The custom data attached to each event contains only the public page path where the selection occurred and a general placement label: header, hero, card or footer. We do not attach destination URLs, query strings, URL fragments, Aura Account details, email addresses, Aura device data or free-form text. These public-site measurements are not controlled by the Aura Link setting or the aura_link_analytics_opt_out cookie. In Aura Link, you can turn both measurements off at any time under Aura Link Settings, Privacy & data. When that setting is off, Aura Link does not load Web Analytics or Speed Insights. The choice follows your signed-in Aura user, and an opt-out cookie also remembers it in that browser after you sign out.
Email and notifications
Updates stay optional.
Release, project and blog topics are off until you select them. If you make a choice, Aura AQ stores the topic, notice version and time with your account. You can change the choice from Email preferences. We do not currently send these optional updates.
Account security, access, billing and critical service messages are operational communications. They are kept separate from optional marketing preferences and are sent only when needed to operate or protect the service.
External and affiliate links
External services apply their own policies.
Some hardware links to Waveshare, DFRobot, and PCBWay are affiliate links. If you buy after using one, 21CNCSTUDIO LTD can receive a commission at no extra cost to you. The Aura AQ BOM displays this commercial relationship before its purchase links.
Affiliate stores, GitHub, YouTube, Discord, social networks and other external websites receive information only after you follow their link. They may use their own cookies and process information under their own privacy notices. Aura AQ does not embed their trackers on aura-aq.com.
Your data protection rights
You can ask about and control your data.
Depending on the circumstances, you can ask us to:
- provide a copy of personal information connected with you;
- correct information that is inaccurate or incomplete;
- delete information where the right to erasure applies;
- restrict or object to particular processing;
- provide portable data where that right applies; and
- withdraw consent for optional email at any time.
These rights are not absolute, and we may need to verify your identity. Send a request to contact@21cncstudio.com. We usually do not charge a fee. We respond without undue delay and normally within one month. If a request is complex, we may extend the response period by up to two months and will tell you within the first month. If some information must be retained, we will explain why.
You have an absolute right to object to direct marketing at any time. We will stop using your information for that purpose when you object.
Complaints
Tell us about a privacy problem.
Email contact@21cncstudio.com with enough detail for us to understand the concern. We will acknowledge a data-protection complaint within 30 days, investigate it without undue delay, keep you informed where appropriate and tell you the outcome.
If you are unhappy with the response, you can complain to the UK Information Commissioner's Office through the ICO data-protection complaints service, by telephone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Changes to this policy
The date above shows the current version.
We update this policy when our services, providers or legal requirements change. If a change affects how we use your information, we will highlight it on the site or notify you through your account. If the change requires consent, we will ask before we begin that use.