Privacy policy

About this website

The AURA X team runs this companion website for the game. You can browse the public catalogs without signing in. Sign-in is optional and is used to check which phase previews and music links you can open.

Signing in with Roblox

Sign-in happens on Roblox. The website never asks for or receives your Roblox password. With your permission, the server receives your Roblox user ID, username and display name, a short-lived access token, and the results of checks for AURA X phase badges.

The requested permissions are openid, profile and user.inventory-item:read. The inventory permission allows the server to query the specific badge IDs used by AURA X, including when your inventory is private. We do not use it to build a list of your other inventory items, and this connection does not change your game progress.

Cookies, storage and connection data

The site uses a secure login cookie and a secure session cookie. These are needed for sign-in and access checks. Your chosen language is saved in your browser's local storage. This version does not add advertising cookies or audience analytics.

Cloudflare hosts the site, the session database and the private aura videos. It processes technical connection data, including IP addresses, to deliver and protect the service. The application uses hashed identifiers derived from IP addresses for request limits. It does not store raw IP addresses in the session database.

How long information is kept

A login attempt lasts up to 10 minutes. A signed-in session lasts no longer than 15 minutes, and badge-check results are reused for up to 30 seconds. Session data and the access token are encrypted in the server database; the browser only receives a random session identifier. The site does not keep a refresh token or create a permanent player profile.

Signing out deletes the active session from the live database and clears its cookie. Expired records are scheduled for deletion every hour; if that cleanup is delayed, expired records still cannot authorize access. Cloudflare may retain recoverable database history and operational data under its own retention policies. Messages you send to support may be retained while your request is handled.

Other services

Roblox processes sign-in and badge requests. Cloudflare processes hosting and storage. Google Fonts supplies the website fonts and receives the connection data needed to deliver them. Music opens as a normal link to YouTube only when you choose to follow it. These services operate under their own privacy policies.

We do not sell the player information used by this website or use it for targeted advertising. An authorized player can copy a music link or record a preview after receiving it; access checks cannot prevent that.

Your choices

You can browse without signing in, sign out at any time, remove the site's permission in your Roblox account settings, or clear this site's browser storage. Contact us to ask about or request deletion of information you have provided. Do not send a password or login token to support.

Roblox's OAuth sign-in is available to eligible Roblox accounts aged 13 or older. Public browsing does not require linking an account. If you believe personal information was provided by someone who cannot use this sign-in, contact us.

Updates

We will update this page when the website's data practices change. The date above identifies the current version.

Contact

Questions, data requests or problems with the website: auraxsupport.gg@gmail.com.