AURSEEAursee
Privacy
Reading the site
Every page you can reach without signing in is a static file. Reading one needs no account.
Our web server writes an access log: the page requested, the response code, the referring page, the browser string and the IP address. It rolls at 20 MB, keeps five files and discards anything older than 30 days. We use it to see which pages are fetched and what returned an error.
If you sign in
We hold your email address. There is no password: you ask for a link, and the link works once and expires after 30 minutes. Signing in sets one cookie, ig, which identifies your session for 120 days. It is HttpOnly, Secure and SameSite=Lax, so it is not readable by scripts and is not sent to other sites. Two more, ig_on and ig_pro, tell a page that you are signed in or on Pro, and hold nothing else.
Attached to the address: the fires you asked to watch, the mail waiting to go to you, and any photographs you sent. A button in your account deletes all of it.
Our mail goes out through Brevo. Brevo rewrites the links in a message and adds an image that loads when the message is opened, so opens and clicks are recorded. We read those to see which alerts are worth sending. Every message carries an unsubscribe link that needs no login.
Launch list
If you leave your email on the opening page, we keep it to tell you when Aursee opens, and send one note confirming you are on the list. Both messages carry a link that takes the address off the list.
Reports
If you report a problem, we keep what you wrote, the page or place it was about and, if you give it, your email, so we can review it and reply once. Reports are not published.
Photographs
Camera GPS coordinates and the camera serial number are stripped from a photograph before it is stored. A picture is only visible on the site after a person has approved it.
In your browser
Two things are kept in your own browser and never sent to us: aursee.seen.v1, aursee.visits and aursee.nudged, which remember whether the welcome card and the alerts suggestion have been shown, and aursee_claim, a token that holds a beach report you filed before signing in so it can be attached to your account afterwards. Clearing site data removes them.
The ad code keeps three more: loop_d, today's ad counts; loop_s, for the length of a visit that started from one of our ads; and loop_ab, how many times the ad-blocker notice has been shown.
Analytics
We count visits in two ways. Our server keeps daily totals from its own logs (pages, referring sites, countries) with no cookies. We also use Google Analytics: the pages you open, how you arrived, rough location, device and browser, kept by Google under cookies whose names start with _ga, for up to 14 months. It is not used for advertising.
In the EU, EEA, UK and Switzerland, Google Analytics loads only if you accept. Elsewhere it loads by default. Wherever you are, Privacy choices at the bottom of every page changes your answer.
If you arrive from one of our adverts, the address carries the advert's click number. Under the same choice as Analytics, this browser keeps it for 30 days, and our server tells the advertising network that showed the advert, with that number only, when the visit opens a second page, asks for a fire alert or confirms one. No name, email address or location goes with it.
Payments
Aursee Pro is paid through Stripe. Stripe handles the card; we never see or store card numbers. We keep your Stripe customer reference, your plan and its renewal date, to switch Pro on and off. A small cookie, ig_pro, tells each page not to show ads while you have Pro.
Advertising
Our ads also promote our sister sites (Spillpoint, Windrift, Wanderwort). They are served from this domain, set no cookie, and we count views, clicks and time on the next site without identifying you. If an ad blocker is on, a notice asks you to turn it off for aursee.org. You can close it; it comes back from time to time.
The only advertising on the site at the moment is our own: the boxes marked Advertisement link to other parts of Aursee or to our sister sites. No third-party ad code is loaded and no advertising cookie is set. When that changes this paragraph changes with it, because it is written from the setting rather than by hand.
Who to ask
Write to contact@aursee.org with any question about what is held about you, or to have it deleted.