Privacy — Aurora One

This website

This site does not use cookies, trackers, analytics scripts or external fonts. It does not contain any forms and does not collect data from you. Pages are static files. Filter selections are only written to your browser's address bar, they are not sent to the server. That's why we don't show a cookie confirmation window: there are no cookies to show.

What's left on your computer

Settings, notes, calendar, alarms, party and earnings records, bookmarks, and backups are kept as JSON files under the Windows user profile on the computer.
License key, YouTube API key and other secrets are encrypted with Windows DPAPI so that only that Windows account can open them; the log files themselves are not encrypted.
The screenshot, OCR result, batch images, and diagnostic package remain on your computer. It only comes out if you copy or save it.
The app does not have usage statistics, analytics or automatic error reporting.

Secrets and records are different. The license record, YouTube API key, privacy key, and public ledger key are encrypted with Windows DPAPI and cannot be opened on another Windows account or computer. The log files themselves (calendar, notes, batch records) are plain JSON text. The backup file is also not encrypted.

Network-requiring operations

License verification: the license key and a randomly generated device ID are sent to the licensing service. It is refreshed approximately every 60 seconds at startup and while the application is open.
Update check: new version information is read from the GitHub release address; Only the product name and version are sent. The package is downloaded with your approval, its size, SHA-256 value and publisher signature are verified.
Weather: coordinate rounded to city level goes to Open-Meteo. An IP-based service or Windows location permission is used for the approximate location, and the name you type in the city search is sent.
News, Rise Online patch notes, forum and events calendar read from public pages and RSS feeds; no entry.
Connection quality: small measurement requests are sent to the modem and the public destination you choose; no data is sent. VPN provisioning reads the public server list at startup.

User version requires internet. The license is verified online at each startup and approximately every 60 seconds while the application is open. A temporary network error does not extend the permission. Use without internet is not supported. For verification, only the license key, a randomly generated device ID and the product version are sent. The IP address is not sent separately, but as with every internet connection, the server can see the address of the connection.

Third party services

WhatsApp, Discord, YouTube, Twitch, Kick, Netflix and similar services are opened on their own pages with WebView2 in Aurora One. You type your login information on the service page, Aurora One does not store passwords and does not read message content.
Cookies and sessions of these services are kept by WebView2 in profile folders on its computer; messaging, streaming platforms, and the browser run in separate profiles, while subscription streaming services run in a common profile. The services' own data collection behavior is governed by their privacy policies.
YouTube ad filter is a standalone plugin (AdGuard); At first use, it is downloaded from the publisher's website and its summary is verified. The Twitch filter is an open source script embedded in the package.
One-click VPN uses public VPN Gate volunteer servers with Windows' own VPN client; traffic passes through these servers, and the app recommends not doing sensitive work such as banking while the VPN is on.

Connection table

External links initiated by the application itself. Requests made by embedded pages (WhatsApp, YouTube, etc.) are not included individually in this table; they are subject to the policy of the relevant service.

External links initiated by the application itself
Service	Purpose	Outgoing information	When
License service	License verification and activation	License key, random device ID, product name and version	Automatic: approximately every 60 seconds during startup and operation
GitHub (api.github.com, github.com)	New version information, update package and signature file; YouTube ad filter widget	Product name and version; no other data	Version check 30 seconds after startup and every hour (can be turned off); download only with your consent
Open-Meteo	Weather and city search	Coordinate rounded to city level; the name of the place you typed in the search	Every 15/30/60 minutes when the air card is open; search with your action
IP-based location service (ipwho.is)	Approximate city	No additional data; Returns the city from the IP address of the service connection	With automatic location and approximate city options on (default on)
RSS feeds from news publishers	News headlines	No data is sent	Once per minute for open sources
Rise Online official sites, Klasgame, EnUcuzGB	Patch notes, events, forum, prices	No data is sent; no login	With the relevant section open and at the interval you selected
YouTube Data API	Public comments for the giveaway	Video ID and your own API key	Only when you say "Collect comments"; no key no request
Cloudflare and Google encrypted DNS	Secure DNS in embedded browser views	Domain name queries of the sites you open	With Secure DNS on (default on)
VPN Gate list and volunteer servers	One-click VPN	Read server list; traffic entering the tunnel (discord address ranges only in default mode)	As a preliminary preparation for the list opening. The connection is only with your action
Link measurement targets (1.0.0.1, 9.9.9.9, modem)	Connection quality	Small measuring packages; no data	Automatic, can be closed; 15 sec in foreground, 60 sec in background
Embedded services (WhatsApp, Discord, YouTube, Twitch, Kick, subscription streaming services, remote desktop, screen sharing)	Service's own page	Requests made by the service's own page; Aurora One does not send additional data	Only when you open the relevant section

Gaming tools and screen data

Farm Guide and Effect remover only reads the screenshot. The image is not sent out. Text-to-speech (OCR) is done on the computer with Windows' built-in engine.
FPS and resource metrics count Windows' metrics events; game memory is not read, no code is added to the game, no network packets are captured.
"Fix screen area" captures the screen only once when you want it to; Covered areas are painted opaque on export, and these images are marked so that they do not enter the Windows clipboard history.
Party Log reads the clipboard only with your Ctrl+V or button action. It does not watch in the background.

Deleting and exporting data

From the Data and Backup section you can clear caches, delete embedded browser profiles (cookies and sessions) or delete the entire data folder with two-step confirmation. It is recommended to take a backup before deleting.
Records are exported as CSV and JSON to the folder you choose. The backup file is a single .auroraone file.
Uninstalling the application does not delete the personal data folder; Only Windows startup records belonging to this installation are removed.

Things We Couldn't Verify

Absolute expressions are not used on this page because the following are not included in the application's source code: what the licensing service records on the server side; Microsoft Edge WebView2 runtime's own links; own data collection behavior of embedded third-party sites; YouTube ad filter plugin's own filter list links; Whether VPN Gate volunteer servers keep records.

This page is updated as behavior changes in the application. The "Addresses the application speaks to" list within the application also serves the same purpose. If you see any difference between the two lists, refer to this page and let us know.

Where does your data stay and when does it appear on the network?