Privacy Policy

• You can browse and watch without an account, and without telling us who you are.
• If you sign in, we store your account identifier and email and the watch history and saved list you asked us to keep.
• We do not sell your personal data.
• Advertising networks and the third-party video providers you play from set their own cookies and see your IP address. That part is theirs, not ours.
• You can delete your account and its data at any time — write to mail.aurastream@gmail.com.

If you sign in. Accounts are handled by Clerk, our identity provider. We receive a user identifier and the email address you registered with. We never see or store your password.

Activity tied to your account. When you are signed in we store, in our database: the titles you watch and how far through them you are, the titles you save to your list, and the title and poster for each so your Continue-Watching row can render without a second lookup.

Aggregate counters, not linked to you. We count views per title and record whether a given video provider played successfully for a given title. These rows carry no user identifier — they exist so the player can put the server that actually works first.

Technical data. Like every website, our hosting receives your IP address, user agent and requested URL in ordinary server logs. Your country code, derived from your IP by the hosting network, is read on each request to apply regional availability rules. It is used in the moment and not stored by us.

• To run the Service: sign you in, show your list, resume where you stopped.
• To rank video providers by measured reliability, so playback starts on a server that works.
• To apply regional availability rules and to keep the Service secure.
• To understand aggregate usage — which titles are popular, which providers fail — always in aggregate, never as a profile of a person.
• To meet legal obligations and respond to valid legal requests.

We do not use your data for automated decisions with a legal effect on you, and we do not sell it.

A signed-out visitor's history and list live entirely in the browser and never reach us. Signing in is what carries them across devices.

• Local storage — watch progress per title, your saved list, recent searches, and a note of which video servers failed for you so they can be tried later rather than first.
• One cookie of ours (as_t) — a one-word hint of your advertising tier, so the first render already knows which ad formats to draw. It contains no identifier and is not used for tracking.
• Cookies set by Clerk when you sign in, to keep your session alive.
• Cookies and storage set by advertising networks and by the video and game frames you open. Those are set by those companies under their own policies.

Clearing your browser storage removes everything in the first two groups, and with it any history you have not signed in to save.

Running this site means other companies process some data on our behalf, or in their own right:

• Clerk — authentication and account management.
• Supabase — the database holding history, saved lists and aggregate counters.
• Our hosting provider — serves every request and keeps standard access logs.
• TMDB — supplies catalogue metadata and artwork. Images load from their servers, so they receive your IP address.
• Third-party video providers — when you press play, the frame is loaded from their domain and they see your IP address and device details directly. We have no visibility into or control over what they collect.
• YouTube for trailers and GamePix for games — same arrangement, in their frames.
• Advertising networks — see the next section.

AuraStream is free and is funded by advertising. Ad networks — currently Adsterra — deliver every advertising format on the Service: the popunder, the social bar, and any banner or native unit. They may set cookies or similar identifiers and use them to select and measure advertisements, including across sites.

Advertising is shown to signed-out visitors only. Once you are signed in, no ad network script is loaded on any page — so those networks are not asked to place an advertisement, and set nothing, while you are signed in.

We do not pass them your email address or your account identifier. A browser-level content blocker or your browser's cookie controls will also limit what they can do.

• Account data — for as long as the account exists.
• History and saved list — until you remove an entry, or delete the account.
• Provider reliability counters — decayed automatically on a schedule and deleted once they are stale, because old evidence about a dead domain is worse than none.
• Server logs — for the short period our hosting provider retains them.

Depending on where you live you may have the right to access, correct, export or delete your personal data, and to object to some processing. However you are covered, we will honour a deletion request.

• Delete your data — email mail.aurastream@gmail.com from the address on the account. Deleting removes your profile, history and saved list; the aggregate counters, which are not linked to you, remain.
• Get a copy, or fix something — same address, say which.
• Stay anonymous — do not sign in. Everything except cross-device sync works without an account.

The Service is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, write to mail.aurastream@gmail.com and we will delete it.

Access to stored data is enforced at the database with row-level security, so one account cannot read another's history or list. Passwords are never handled by us. No system is perfectly secure, and we cannot guarantee absolute security — keep that in mind before entrusting anything sensitive to any website.

We may update this policy. The current version, with its last-updated date, is always the one on this page. Material changes will be signposted on the site.

Questions about privacy, or a request about your data: mail.aurastream@gmail.com. For copyright complaints use the DMCA Policy page instead — it goes to the same inbox but the required details are different.