Not yet in force. This text describes what this build actually does and is prepared for professional review; the controller's identity and contact are not provided yet, so it does not apply as a legal notice.
Cookies and storage on your device
Effective date: not yet in force. Controller and contact: see the privacy notice (privacy@auratrip.app). The Italian translation is published at the same address in the app. The English and Italian versions have equal value; if they differ, the one more favourable to you applies. Questions: privacy@auratrip.app.
In short: the public app sets no cookies, shows no advertising and uses no analytics or tracking. It keeps some things in your browser's storage only to make the features you use work. Under the Garante's cookie guidelines (10 June 2021) and EDPB Guidelines 2/2023, storage that is strictly necessary for a service you asked for needs no consent, but it must be disclosed: this page is that disclosure. That is why Aura shows no cookie banner. If Aura ever adds analytics or anything else that needs your consent, it will ask first, and you will be able to say no.
The one cookie: private preview access (never on the public app)
| Name | Set by | Purpose | Properties | How long |
|---|---|---|---|---|
aura_preview_session | Aura, only on a private review preview protected by a passphrase (never on the public app) | Remembers that you entered the preview passphrase, so every page and file of that preview can be opened | HttpOnly (not readable by page scripts), Secure, SameSite=Lax; contains an expiry, a random value and a signature, never the passphrase | 7 days, and never beyond the preview's own expiry |
What Aura keeps in your browser
| Key | Where | Purpose | How long |
|---|---|---|---|
aura.v3.aura-trip.<trip id> | localStorage | Trips you plan without an account | Until you delete the trip or clear site data |
aura.v3.aura-pending.<account id>:<trip id> | localStorage | Changes to an account trip that have not reached the server yet, so they are not lost if you leave or lose the connection | Removed when the server confirms the change, and when you sign out |
aura.v3.aura-offline.… | localStorage | The last saved copy of each of your account's trips you opened here, so it opens without a connection (kept until the trip ends), and for which account | Until the trip ends, you sign out, or clear site data |
aura.v3.aura-offline-list.… | localStorage | The list of your account's trips last seen on this device, so Your trips opens without a connection | Until you sign out or clear site data |
aura-reminders:<trip id> | localStorage (iOS app only) | That you turned on reminders before each stop of this trip. The reminders themselves are scheduled by iOS on your phone and are never sent to Aura | Until you turn them off, delete the app, or clear its data |
aura.v3.trip-overlay.<trip id> | localStorage | Day editor of the older screens, for trips without an account | Until deleted |
sb-<project>-auth-token | localStorage (Supabase) | Keeps you signed in | Until you sign out |
aura.routes.v2 | localStorage | Shapes of routes already calculated between stops, so they are not requested again | Each route at most 30 days, or until you clear site data |
aura.travelProfile.v1 | localStorage | Your travel preferences (Tu › Travel preferences): age group, pace, walking, driving, taxis, interests, food and spending style. On this device; a new trip starts from them. Signed in, once saving to the account is switched on, also kept in your account (never the needs below) | Until you clear them on that page or clear site data |
aura.travelProfile.stamp.v1 | localStorage | When the travel preferences on this device last changed, and for which account (so the newer copy wins and sign-out removes an account copy) | Until you sign out of that account, clear the preferences or clear site data |
aura.displayName.v1 | localStorage | The name Aura greets you with (Tu › Profile), if you give one. Only on this device: not in the account, not shown to people you share a trip with | Until you clear it on that page or clear site data |
aura.travelNeeds.v1 | localStorage | Accessibility and dietary needs, only if you switch them on (some are health data). Only on this device | Until you switch them off, clear the preferences or clear site data |
aura.active-trip-id | localStorage | Which trip the older screens show | Until changed |
aura.v6.savedDestinations | localStorage | Destinations you saved on the home screen (at most 24) | Until you remove them or clear site data |
aura.install.visits, aura.install.dismissed | localStorage | How many visits before offering "add to home screen", and whether you said "not now" | Until you clear site data |
aura.pack.done.v1, aura.pack.custom.v1 | localStorage | Your packing list ticks and items | Until you clear site data |
aura.saved.places.v1, aura.plans.v1, aura.stops.done.v1, aura.choices.v1, aura.budget.overrides.v1, aura.memory.notes.v1 | localStorage | Choices, notes and budget figures on the older Mallorca screens, only if you use them | Until you clear site data |
aura.analytics.consent | localStorage | Your answer to "measure how the app is used", only where analytics asks for consent (it records a refusal too) | Until you change it or clear site data |
aura.analytics.opens | localStorage | Only with analytics consent: which trips you opened and when first (trip id and date), to count a return visit within 7 days | Each entry at most 30 days; removed when you withdraw consent. Never written when analytics is off or runs without device storage |
aura.assist.convo@<account or guest>, aura.assist.undo@…, aura.assist.reopen@… | sessionStorage | The assistant's conversation, last undo and reopen note, kept separately for each account; can contain names, dates and times of your bookings and places | Until you close the tab or sign out |
aura.newtrip.draft.v2:<owner>:<city or remixed trip> | sessionStorage | The new-trip form you have not saved yet (dates, who is going, interests, bookings typed in), so it survives going back and forth | Until you close the tab, create the trip, or sign out |
aura.saved.v1, aura.saved.owners.v1 | localStorage | Places and cities you saved on this device, and which account (if any) saved each one, so one person's saves are not shown to another on a shared device | Until you remove them, sign out (for an account's copies) or clear site data |
aura.saved.deviceOwner | localStorage | Which account last saved on this device, so saves are kept apart. Written only by earlier versions of Aura; the current version only removes it | Until you sign out or clear site data |
aura.locale | localStorage | The language you chose, if you chose one | Until you change it or clear site data |
aura.places.return.v1… | sessionStorage | Where you were in a list when you opened a place, so "back" returns you there | Until you close the tab or sign out |
aura.pendingProposal.v1.<trip id> | sessionStorage | A change to your plan proposed after you add a booking, until you accept or dismiss it | Until you close the tab |
aura.booked.draft.<owner> | sessionStorage | Bookings you are typing in "Start from my bookings", before the trip is created | Until you close the tab, create the trip, or sign out |
aura.nav.tabs, aura.nav.scroll | sessionStorage | Which page each tab was left on and the scroll position, for back and forward | Until you close the tab or sign out |
aura.discover.filters.v1 | localStorage | Your optional Discover filters (month, who is going, kind of trip) | Until you change them or clear site data |
aura.home.introDay | localStorage | The date the home screen's short opening animation last played, so it plays only at the first visit of each day (new home, test builds only so far). Contains only the date | Until you clear site data |
aura.home.turn | localStorage | A counter of how many times the iPhone app has been opened, so the home screen and Saved show the cities in a different order each time. Contains only a number | Until you delete the app or its data |
aura.install.session, aura.boot-retry | sessionStorage | One visit counted per session; one automatic reload if the app fails to start | Until you close the tab |
aura.review.brand | sessionStorage | Brand preview switch used only in design reviews (?brand=) | Until you close the tab |
aura.intel | localStorage | Review switch for test data on travel times (?intel=); development builds only, never the public app | Until ?intel=off or you clear site data |
aura-v5-4-static, aura-v5-4-pages | Cache storage (service worker) | App files, pictures and fonts, and a copy of pages you have opened, so they can be read offline. Aura's own data answers (/api/…) and anything from other sites, such as your account data, are never stored here | Until a new version of Aura replaces them, or you clear site data |
aura-v5-4-shell-<owner> | Cache storage (service worker) | Copies of app pages opened while signed in, kept apart for each account | Removed when you sign out or switch account, or clear site data |
aura-trip-… | Cache storage (service worker) | Offline copy of a trip you prepared, at most 3 trips, linked to the account that prepared it | Until you remove it, sign out or switch account, or clear site data |
Other services your browser contacts
None of these sets a cookie on Aura's site. They receive your IP address and browser details, like any website you load content from (see the privacy notice, section 4):
- Map tiles from OpenStreetMap's servers, on screens with a map.
- Photos from Wikimedia Commons, on place pages that show an open photo.
- Google's place card is switched off in the public app, so your browser does not load it.
Before it is ever switched on, Aura will check what Google's script stores in your browser and update this page; if anything needs your consent, Aura will ask first. When on, on a place's page, when you reach the "Google" section, your browser would load Google's Maps JavaScript and Google's card; Aura sets and reads nothing for it, and Google's policy (policies.google.com/technologies/cookies) governs what Google's script stores.
- Cloudflare Turnstile, on the sign-in form only, when that check is switched on: a security
check that tells a person from an automated sign-in request. Aura sets and reads nothing for it; what Cloudflare's script keeps in your browser is to be verified and will be listed here before the check is switched on.
- Fonts are served by Aura itself: no page requests a font from Google or any other font
service.
- Assistant model, product analytics, Sign in with Google and the public routing service are
switched off in the public app (see the privacy notice). Analytics without your consent never writes anything to your device.
- Links you open (official sites, tickets, Google Maps or Apple Maps directions) take you to that
site, under its own terms and cookies.
How to remove it
Delete your trips, sign out, or clear this site's data in your browser settings. Clearing site data removes everything listed above at once.