Privacy Policy

Last updated: August 16, 2026

Aurowall turns screens into ambient displays. We collect as little as the product needs, and we do not sell or share your personal data with anyone for advertising.

What we collect

Without an account — nothing personal. Your preferences (last mood, brightness, hidden UI, game progress) stay in your browser's local storage and never reach our servers.

With an account — your email address, a display name, your favorite moods, and (if you use Business) the content you put on your displays: business name, logo, messages, links, Wi-Fi text, hours, schedules, and uploaded media. Passwords are stored hashed; we can never read them. For security, each sign-in session also records the IP address and browser it came from; these are deleted with the session.

Weather — the clock's weather widget asks the Open-Meteo service for your approximate area's forecast. We don't store your location.

Public by design

Business display pages (aurowall.com/display/…) are public web pages. Anything you put on one — logo, messages, Wi-Fi details, uploaded images or video — is visible to anyone with the link. Don't put secrets on a wall screen. Room chat messages are visible to everyone in that room along with your display name, and are automatically deleted within 48 hours.

Third-party services

Music and some visuals are YouTube embeds, which load from YouTube and are subject to Google's privacy policy. Scene videos come from Pexels. Sign-in with Google, Facebook, or Apple shares your email and name with us from that provider — nothing more. Hosting is on Vercel, data lives in Neon (Postgres), uploaded business media is stored in Cloudflare R2, and transactional account, application, billing, payout, and legal emails are sent through Resend. We retain the recipient, message category, subject, provider message identifier, delivery status, timestamps, and failure reason so we can prevent duplicate sends and investigate delivery problems. Optional product, seasonal-room, and artist-release email choices default off and can be changed in your profile; necessary service messages are not marketing. Copyright notices and counter-notices retain contact details, statements, evidence hashes, and operational history for dispute handling and legal recordkeeping. Artist rights documents are kept in private object storage and are available only to the submitting artist and authorized administrators through expiring links. We also use the request's approximate country code to enforce Artist Room country availability; we do not need precise location for that decision. Artist Room analytics retain starts, server-credited visible playback time, qualified listening, saves, shares, and artist-link clicks. A salted one-way device hash supports aggregate unique-listener counts; artists receive totals, not viewer identities or device hashes. Payments, when they launch, will be processed by Stripe — card details never touch our servers.

Usage analytics

To understand which moods, sounds, and features people actually use, we collect product usage statistics with PostHog: pages visited, time spent, and buttons clicked. For visitors without an account this is tied only to a random device identifier — no name, no email, no profile. If you're signed in, usage is linked to your account id so we can improve what you use most. We never sell this data or use it for advertising.

Aurowall Earn data

If you request Earn enrollment, SSARI Inc. records your account identifier, verified email status, country, consent version and time, account/review status, sponsor exposure and qualification events, device and session identifiers, coarse network and browser signals used for integrity review, campaign and earning-period records, ledger entries, payout status, appeals, and administrator decisions. We use this information to operate the pilot, prevent duplicate or manufactured activity, allocate collected sponsor revenue, support users, reconcile payouts, and meet legal, tax, accounting, and audit obligations.

Earn is available only to users age 18 or older. Stripe may collect and verify the participant's identity, birth date, address, tax information, and bank-account details under Stripe's own privacy policy. Sensitive identity and bank information entered into Stripe's hosted onboarding does not pass through Aurowall's forms, though Stripe returns account capability, requirement, transfer, and payout status to us.

Sponsor reports use aggregate delivery information and do not include your email, payout details, or individual browsing history. We do not sell Earn personal data or use payout identity data for behavioral advertising. Financial ledgers, consent, fraud-review, tax, and payout records may be retained after account closure when needed for legal, tax, dispute, audit, and reconciliation duties; the final retention schedule remains subject to professional legal and accounting review before live money is enabled.

The mobile app

The Aurowall iOS app works without an account and includes no analytics or advertising SDKs. Your favorites, alarms, listening stats, and settings are stored only on your device; deleting the app deletes them. The optional weather display uses your device location — with your permission — to fetch current conditions from Open-Meteo; if you decline, it falls back to an approximate city from your IP address (via ipapi.co). Neither your location nor IP is stored, and hiding the weather stops all lookups. Notifications (daily quotes, focus timers, wake-up alarms) are scheduled locally and never touch our servers. Offline copies of favorited sounds are downloaded to your device and removed when unfavorited. Radio stations play directly from the stations' own servers (Radio Paradise, Radio Swiss, and others), subject to their privacy policies — we add no identifying information to those requests. Scene videos are fetched from Pexels through our API.

Cookies

We set two kinds: the session cookie that keeps you signed in, and the analytics identifier described above. No ad pixels, no cross-site tracking. YouTube embeds may set their own cookies as any embedded player does.

Deleting your data

Delete business displays anytime from the dashboard. To delete your entire account and everything attached to it, email info@aurowall.com from the account's address and we'll remove it.

Changes

If this policy changes materially, we'll note it here with a new date. Questions: info@aurowall.com.