Version 1.1
Privacy Notice
Operator and contact
Ross Igolkin, based in United States, is responsible for AUREL’s data handling. Privacy questions and requests: hello@aurelworld.com. Effective date: 2026-10-19.
Information used by the service
Guest collections use a random identifier, hashes of recovery and guest-session credentials, acknowledgement version and time, selected products and options, checkout and order references, timestamps, numbered allocations, optional guest choices and collection records. Optional accounts add an email address, verification status, optional display name, a password hash for email/password sign-in, session records and security/recovery records. Google sign-in can provide your Google account identifier, verified email, name and profile-picture address; these are not automatically published. Wishlists store chosen product identifiers. Gifts store sender and recipient account references, the acquisition, acknowledgement, expiry and claim state. Suggestions contain the idea, department, reference, review state and time. We do not request payment-card details, a postal delivery address, a photograph or a birthday. Do not include personal or confidential information in suggestions.
Cookies and browser storage
Necessary HttpOnly, Secure, SameSite cookies provide guest collection or account access. Guest credentials are hashed on the server; account access uses the authentication service’s opaque session records. Guest sessions normally expire after 90 days; account sessions after 30 days, unless refreshed or revoked earlier. Browser storage may hold your cart, selected settings, guest wishlist, interface preferences, temporary setup/checkout retry keys, referral value and a locally entered name for an image. A newly issued guest recovery code may be held temporarily to display it after checkout; keep your saved copy private. Passwords and Google credentials are not saved in the cart or wishlist. Clearing browser storage does not itself delete server records.
Network information and service providers
Cloudflare hosts the site, database and security services and processes network information, including IP addresses, to deliver pages and reduce abuse. Cloudflare Turnstile protects abuse-sensitive actions. Application rate limits use keyed hashes of network identifiers; account session records do not retain the browser’s IP address or user-agent string. Postmark receives the address and message content to send requested verification, account-recovery, order-confirmation and tracking emails. Optional Google sign-in requests identity information only: account identifier, verified email, name and profile-picture address. It does not request access to your Gmail inbox. Support mail to AUREL is forwarded by Cloudflare Email Routing to the operator’s private Gmail support inbox and used for your enquiry. Providers process data under their own terms; random identifiers do not mean no personal data is processed.
Why information is used
Necessary service information operates collection and account access, account recovery, acknowledgement, order confirmation, finite editions, wishlists, gift claims, progress and keepsakes. A verified account may connect guest orders whose already-verified email matches, or the guest collection you currently control. An email string alone cannot claim someone else’s collection. You may shop as a guest without creating an account or supplying email. Creating an account requires a verified email. Suggestions are optional. Limited security and failure information reduces abuse and helps correct faults. Supplied account/contact information is used for service messages and support, not an automatic newsletter subscription. Accepting Terms is not blanket consent to unrelated marketing or tracking.
Optional email and verification
Guest email is optional. If supplied for order updates, verify it or remove it before checkout. Guest codes expire after 10 minutes and allow five incorrect attempts; resends require at least 60 seconds, with additional recipient and network caps. Account verification and password-reset links expire after 30 minutes. Account email must be verified before sign-in or gift claims; Google sign-in relies on the verified identity returned by Google. Resetting a password revokes previous account sessions. Account verification/reset messages have additional recipient caps. Removing order-tracking email from a signed-in collection disables tracking across its linked collections; account-security emails remain available. Unverified guest contacts are scheduled for deletion after 12 hours. AUREL sends transactional service messages, not marketing emails. Provider acceptance does not guarantee inbox delivery.
Tracking links and public sharing
An email tracking link permits read-only order access until 30 days after confirmation. Treat it as private; changing/removing the contact or transferring the acquisition as a gift invalidates the earlier access. Public purchase links are explicit and revocable and reveal the selected product, options and story without account email or recovery credentials. Collection and wishlist sharing creates an explicit snapshot; future changes are not automatically added, and replacing or disabling the snapshot revokes its old link. A gift link contains a private claim secret. Anyone with it can attempt to claim the acquisition after verified sign-in, so send it only to the intended recipient. Unclaimed links expire after 30 days and may be cancelled or replaced. A claim transfers the existing acquisition once, preserves its story/edition and revokes its previous public purchase link. Recipient identity is not displayed to the sender. A locally added name can appear in a downloaded image. We cannot recall forwarded email, screenshots, downloads or copies posted elsewhere.
Limited measurement
We record limited first-party events and aggregate counts for product views, confirmed orders, share actions, shared-link visits and referred orders. A share action is an attempt, not proof of a published post. Temporary deduplication marks are scheduled for removal after seven days; aggregate totals may remain without a personal ownership link. Private service-failure counters contain only a UTC date, service, operation type, count and last-seen time, with a seven-date reporting window and bounded cleanup. They contain no request contents or exception messages. Public pages also use the dedicated AUREL Cloudflare Web Analytics beacon for aggregate visits, page views and loading performance. It does not use analytics cookies or local-storage identifiers and is omitted from checkout, collection, confirmation, order tracking and private backoffice pages. Cloudflare processes these measurements under its privacy terms. No Google Analytics, advertising pixels or cross-site profiling are installed. We do not put email addresses, private credentials, verification codes or idea text in analytics URLs or event payloads.
Retention and cleanup
Guest sessions normally expire after 90 days and account sessions after 30 days. Expired account sessions, recovery records and short-lived rate-limit records are cleaned in bounded batches. Unverified account signups are scheduled for deletion after seven days. Collections and associated order/contact data are scheduled for deletion after 365 days without recorded activity; account data, wishlists, snapshots and gift records follow the associated account’s lifecycle. Unverified guest contacts are removed after 12 hours. Settled receipt/tracking-message bodies are cleared after seven days; limited delivery status/provider references may remain with the active collection. Pending and declined suggestions expire after 90 days. Reviewed/selected suggestions may remain while used and currently have no automatic expiry; request removal with the submission reference. Non-personal edition serial/state records and aggregate counts may remain for edition integrity. Cleanup is bounded and can be delayed by outages or backlogs. Providers apply their own retention. Restricted operational backups may temporarily contain deleted records and are used for recovery. Contact hello@aurelworld.com about retention or deletion.
Access, correction and deletion
Your collection provides access to its records and a data download. Account downloads include linked collection and purchase records, wishlist, snapshots, gift history, sign-in provider identifiers, session dates and email-delivery status, excluding credentials and other collectors’ identities. Guests can replace a recovery code and delete their collection. Signed-in users can manage sign-in, wishlists, gifts and public links, remove order-tracking email across linked collections and sign out. Account deletion requires a signed-in session, a private email link and a separate confirmation in account settings; opening the email link alone does not delete anything. It removes the account and its linked collections, wishlists and public links, while acquisitions already claimed as gifts remain with their recipients. Contact hello@aurelworld.com if you need help. Deleting a collection removes its credentials and private ownership links, revokes tracking access and permanently retires its claimed numbered units. Keep a suggestion reference for later access or deletion requests. We may need reasonable proof of control; never email a password, recovery code, session credential or verification code. A deletion request cannot recall copies already forwarded or published elsewhere.
Audience and international processing
AUREL is for people aged 13 or older, subject to higher applicable local restrictions. If you are under 18, use the service with a parent or guardian’s permission. The service is not intended for children below the published minimum age. Do not submit another person’s information. If you believe someone below the published minimum age has provided information, contact hello@aurelworld.com. Cloudflare, Postmark and Google Gmail may process information outside your country through their hosting, delivery and support systems. Contact hello@aurelworld.com for questions about this processing or to exercise rights that apply where you live. You may also complain to the data-protection authority competent for your location.
Provider notices: Cloudflare, Postmark and Google.