FindAurora – Privacy Policy

Effective date: September 2026

At FindAurora ("we", "our"), we respect your privacy. This Policy explains what personal data we process, why we process it, the services we use, and your rights under applicable privacy law, including the EU/EEA GDPR.

1. Who we are & contact

FindAurora is operated in Iceland. For privacy questions or requests, email hello@findaurora.is.

2. What we may process

Email address and subscription status when you join Aurora Watch or receive service emails.
Account information needed to sign in and provide Premium access.
Location you choose to share when FindAurora needs it to assess local viewing conditions, find viewing spots, or provide location-based guidance.
Aurora sighting/report data you submit. Public presentation is privacy-protected and does not expose raw residential GPS positions.
Purchase and entitlement information needed to confirm Premium access. Payment card details are handled by the payment provider and are not stored by FindAurora.
Analytics and usage data such as pages and features used, device/browser information, referrer and approximate geographic information, but only when you allow Analytics.
Advertising and consent data where advertising is enabled, such as consent choices and information used by advertising providers to serve, limit, measure or report ads in accordance with your consent and applicable law.
Technical and security logs needed to operate, protect and troubleshoot the service.

3. How we use the data

To provide live aurora information, local condition assessments, maps, curated viewing spots and location guidance.
To operate Aurora Watch, including subscription confirmation and aurora alert emails.
To create and maintain user accounts and Premium entitlements.
To process and verify purchases and prevent payment or account abuse.
To understand how FindAurora is used and improve the product when Analytics consent has been granted.
To serve and measure advertising where advertising is enabled and the required consent has been obtained.
To maintain security, diagnose faults and protect the service from spam or misuse.

4. Legal bases

Consent – for Aurora Watch subscriptions, Google Analytics and, where required, advertising cookies or related advertising processing.
Contract / service delivery – where processing is necessary to provide an account, Premium access, a purchase or a feature you request.
Legitimate interests – for security, fraud prevention, reliability and essential service improvement that does not require optional Analytics or advertising consent.
Legal obligation – where records must be kept to comply with applicable law.

5. Email delivery

FindAurora uses Customer.io to manage and deliver Aurora Watch and transactional service emails. Aurora Watch uses confirmation before the subscription becomes active. Marketing or alert emails include an unsubscribe option where applicable.

6. Accounts and authentication

FindAurora uses Supabase for account authentication and related account data. Authentication information is processed only as needed to sign you in, protect your account and provide account-based features.

7. Payments

Premium checkout is handled through Teya. FindAurora receives the information needed to verify that a payment succeeded and to activate the correct Premium entitlement. FindAurora does not store your full payment-card details.

8. Cookies, consent and Analytics

FindAurora uses essential browser storage and cookies where needed for core functions such as authentication, security and remembering choices. Google Analytics is disabled by default and starts only after you explicitly allow Analytics. If you decline, FindAurora's essential features remain available.

The Analytics choice does not itself grant advertising storage, ad-user-data or ad-personalisation consent. Where advertising requires consent, it is requested and managed separately before optional advertising storage or personalised advertising is enabled.

9. Location data

FindAurora asks for device location only when a feature requires it and your browser/device gives permission. Location can be used to compare your current conditions with curated viewing spots and produce guidance. Do not share location if you do not want that feature to process it.

10. Advertising and attribution

FindAurora may use Google AdSense to display advertising and Google Ads to bring visitors to the site and measure campaign performance. Third-party vendors, including Google, may use cookies or similar technologies to serve and measure ads where permitted by your consent and applicable law.

Google's use of advertising cookies can enable Google and its partners to serve ads based on visits to FindAurora and/or other websites. Where personalised advertising is available, users can manage or opt out of personalised ads through Google Ads Settings. FindAurora does not sell personal data to advertisers.

Campaign and referrer information may appear in Analytics when Analytics consent has been granted. Advertising consent is separate from Analytics consent.

11. Data sharing and processors

We do not sell or rent personal data. We share data only with service providers needed to operate FindAurora, such as hosting, authentication, email delivery, analytics, advertising and payment processing, and only for the relevant service purpose.

12. International transfers

Some service providers may process data outside Iceland or the EEA. Where required, transfers are handled using lawful safeguards provided by the relevant service provider.

13. Retention

Subscription data is retained while needed to provide Aurora Watch and to maintain necessary consent/unsubscribe records.
Account and Premium data is retained while needed to provide the account, entitlement and legally required transaction records.
Analytics, advertising-consent and technical logs are retained for limited operational, compliance, security and product-analysis periods and may later be aggregated or deleted.
Submitted sighting/report data may be retained for service quality, validation and aurora-model auditing, subject to privacy protections for public display.

14. Your rights

Depending on applicable law, you may have rights to access, correct, erase, restrict or object to processing, request portability, and withdraw consent. Withdrawing consent does not affect processing that was lawful before withdrawal. To exercise your rights, contact hello@findaurora.is. You may also complain to the relevant data protection authority.

15. Children

FindAurora is not directed to children under 16 and we do not knowingly collect personal data from children for account, subscription or Premium purposes. If you believe a child has provided personal data, contact us.

16. Security

We use reasonable technical and organisational safeguards appropriate to the service, including encrypted connections, access controls and restricted server-side credentials.

17. Changes to this Policy

We may update this Privacy Policy when FindAurora or its providers change. The effective date above shows when this version became current.

Open the map