Privacy notice · accounts
Your email address, the account name you chose, your name if you give one, when you joined, your password only as a salted scrypt hash (never the password itself) with the date it last changed, and for each passkey only its public key and a label. We use your email only for sign-in links, password resets and a short note when your password changes.
Your globe settings (which layers are on, the base map, where you looked last), the homes, rooms, places and objects you add (each a private .are file), and your own databases with their records. Only you can see them. If you turn on "On my globe" for a database, it shows as a layer on your own globe, still only for you.
Photos, videos, scans, 3D models, drawings and documents you upload are stored as you sent them, private to you. Phones often put the place, the camera and the time inside a photo. We read the place so you can see your photos on your own map; nobody else sees it. You can remove the place when uploading, or later for one photo or all of them (this cannot be undone; the picture stays the same). The small previews we keep have no hidden data. We do not blur faces in your own photos and we do not use your files to train anything.
You can make a read-only link to one file. Anyone with the link can open that file until the date you choose or until you stop sharing. Photos opened through a link are a copy without place, camera or date. Check who is in a photo before you share it. Files you delete stay in your trash for 30 days, then they are deleted.
We count, per month, how many AI actions, 3D scans and place reports you use, and how much storage you take, so the limits of your plan work. We count numbers only, not what you asked or uploaded.
If you use Drives, your video stays on your device. Your browser picks still frames along the stretch you choose and blurs people, faces and vehicles (so also number plates) before anything is sent. We receive only those blurred frames (without any EXIF data), their GPS position and the drive's track, and build a 3D model of the street from them. Frames, track and model are private to you and are not shared, published or used to train anything. The automatic blur can miss something; delete a drive at any time to remove its frames, model and place. Footage of other people is your responsibility as the person who recorded it. If you tick share heights for a drive, only the measured height of each building next to the road (tied to its OpenStreetMap outline) joins the shared building map as open data; no images, route, time or anything about you. Untick it and the numbers are removed. A GPS track recorded with this page on your phone stays on that phone.
What we store. When you join the network we store your profile (handle, display name, bio, picture, status), your posts, replies, polls and votes, likes, reposts, follows, bookmarks, lists, blocks and mutes. We also store messages in spaces, channels and direct messages, reactions, pinned and saved messages, reminders, scheduled messages, tasks, calendar events, and files you upload (up to 10 MB, allowed types only). Reports and moderation decisions are stored as well.
Who sees it. Signed-in Aureality members see posts. Space messages are visible only to that space's members, and direct messages only to the people in them. Direct messages are not end-to-end encrypted: they sit on our server, and an administrator can technically open them, which happens only when handling a report or when the law requires it.
Location. A place is added to a post or message only when you add it, as an exact point or only an area. We do not collect location without your click.
Seen. In direct messages others can see that you have seen a message. You can turn this off in Settings → Privacy.
Calls. Voice, video and screen sharing go directly between participants (WebRTC). No audio or video passes through our server and nothing is recorded. The server only passes the technical data needed to connect, and keeps in memory who is in a call. Your browser uses Cloudflare's STUN server to learn its public address, so Cloudflare sees your IP address. Other people in the call can also see your IP address.
Webhooks. A channel admin can create a secret address that another system (for example sensors in a house) uses to post into the channel. What it sends is stored as a message in that channel.
Export and leaving. In Settings → Data and account you can download all your data as a JSON file. When you leave the network we delete your profile, posts, files, messages (threads keep only a "deleted" mark), reactions, follows, bookmarks, lists, reminders and scheduled messages. Spaces you own pass to an admin or another member. Reports you sent stay for moderation, without your name.
Where it lives. The data sits on our own server in Czechia, not with advertising or analytics services.
Co ukládáme. Když se připojíte k síti, uložíme váš profil (přezdívku, zobrazované jméno, popis, obrázek, stav), příspěvky, odpovědi, ankety a hlasy, lajky, sdílení, sledování, záložky, seznamy, blokování a ztlumení. Dále zprávy v prostorech, kanálech a přímých zprávách, reakce, připnuté a uložené zprávy, připomínky, naplánované zprávy, úkoly, události v kalendáři a soubory, které nahrajete (do 10 MB, jen povolené typy). Ukládáme také nahlášení obsahu a rozhodnutí moderátorů.
Kdo to vidí. Příspěvky vidí přihlášení členové Aureality. Zprávy v prostoru vidí jen jeho členové, přímé zprávy jen jejich účastníci. Přímé zprávy nejsou šifrované mezi koncovými zařízeními: leží na našem serveru a správce je technicky může otevřít, a to jen při řešení nahlášení nebo když to vyžaduje zákon.
Místo. Místo u příspěvku nebo zprávy přidáte jen sami. Můžete zvolit přesný bod, nebo jen oblast. Bez vašeho kliknutí polohu nesbíráme.
Přečteno. V přímých zprávách ostatní vidí, že jste zprávu viděli. V Nastavení → Soukromí to můžete vypnout.
Hovory. Hlas, video a sdílení obrazovky jdou přímo mezi účastníky (WebRTC), přes náš server neprochází zvuk ani obraz a nic nenahráváme. Server jen předá technické údaje k navázání spojení a drží v paměti, kdo je v hovoru. Ke zjištění veřejné adresy používá prohlížeč server STUN společnosti Cloudflare, který tak vidí vaši IP adresu. Ostatní účastníci hovoru vaši IP adresu mohou vidět také.
Webhooky. Správce kanálu může vytvořit tajnou adresu, přes kterou jiný systém (například čidla v domě) posílá zprávy do kanálu. Co se pošle, uložíme jako zprávu v tom kanálu.
Export a odchod. V Nastavení → Data a účet si stáhnete všechna svá data jako soubor JSON. Když síť opustíte, smažeme váš profil, příspěvky, soubory, zprávy (ve vláknech zůstane jen značka „smazáno“), reakce, sledování, záložky, seznamy, připomínky a naplánované zprávy. Prostory, které vlastníte, předáme správci nebo dalšímu členovi. Nahlášení, která jste poslali, zůstávají kvůli moderování, ale bez vašeho jména.
Kde to je. Data leží na našem serveru v Česku, ne u reklamních ani analytických služeb.
Every Aureality site has a Feedback button. When you send something we keep what you wrote, its kind (suggestion, problem, question, something good), the site and page path, your browser language and the time. Only if you choose: your account name (signed in, "send as" ticked), an email address for a reply (only with "I would like a reply" ticked) and page details (screen size, and on the maps the view and layers that were on). The form shows all of it under "What is sent" before you send. We do not store your IP address or any browser fingerprint. Only the Aureality team reads feedback, to fix problems and plan features; it is not shared, published or used to train anything. A reply email is deleted after 12 months and the whole message after 24 months. Signed in, you see your earlier messages and their status in the form under "Your messages" and can delete any of them; if you delete your account, your messages lose your name and email. The legal basis is our legitimate interest in improving the service, and your consent for the reply email.
On Aureality's own server, run by us (not a cloud service), reached through Cloudflare for secure connections. Sign-in emails go out through our mail provider. We do not sell data and we show no ads.
While you are signed in we keep a session record: the browser and system (for example "Firefox on Windows"), when it started and when it was last used, so you and the admin can sign devices out. A sign-in ends after 30 days without use, and after a year at the latest. Other Aureality sites get short-lived tokens tied to it, which we keep only as hashes.
In Your space you can download everything as one ZIP in open formats (.are, CSV, GeoJSON and your files as uploaded), see and stop your shared links, and on your account page delete your account with all its data, files and links at any time. Questions: [email protected].