Cookie Policy
What we store on your device, and why.
Last updated: 2026-07-27
This Cookie Policy explains the cookies and similar technologies that Auraverse LLC (“Auraverse,” “we,” “us”) uses on the Auraverse website and services (the “Service”). It is part of our Privacy Policy, which explains what we do with the information involved.
1. What these technologies are
A cookie is a small file a site stores in your browser and reads back on later visits. Browsers offer other storage for the same job — local storage is the one we use — and this Policy covers both. Storage set by auraverse.fm is “first-party”; storage set by another company whose code runs on the page (our payment processor, and our advertising and consent partners once advertising is enabled) is “third-party.”
2. What we store today
These are used on every plan, including free and signed-out browsing. All of them are needed to run the Service; none of them are analytics or cross-site tracking technologies.
| Name | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
Sign-in cookies (for example __session, __client_uat) | Cookie | Clerk (our authentication provider) | Keeps you signed in and keeps your session secure. | Session-based; durations are set by Clerk. |
__return_to | Cookie | Auraverse | Returns you to the page you were viewing after you sign in. | 10 minutes. |
share_ref | Cookie | Auraverse | Credits a sign-up to the shared link you followed. | 30 minutes. |
aura-ad-session | Browser local storage | Auraverse | A random, opaque identifier with no personal information in it, used to limit how often the same ad is shown to this browser — including when you are signed out. First-party only; not used to track you across other sites. | Until you clear your browser's site data. |
Payment cookies (for example __stripe_mid, __stripe_sid) | Cookie | Stripe (our payment processor) | Runs checkout and subscription management and helps Stripe detect payment fraud. | Up to one year, as set by Stripe. |
Our contact form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than a bot. Turnstile sets no tracking cookies; it receives your IP address and basic browser signals solely to score that check.
3. What activates when advertising is enabled
The Service is ad-supported on its free tier; paid Patron plans are ad-free. When advertising is enabled, our own promotions (“house ads”) are chosen on our servers and set no additional storage beyond the aura-ad-session identifier listed above. Ads served through a third-party advertising network, and the consent prompt that gates them, involve the following categories:
| Name | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
Consent cookies | Cookie / local storage | Our consent management platform | Records the advertising choices you make in the consent prompt, so you are not asked again on every visit and so your choice can be enforced when an ad is selected. | Typically up to 13 months, as set by the consent platform. |
Ad-serving cookies | Cookie | Our advertising network | Selects which ad to serve, caps how often you see it, and detects invalid or automated traffic. | Varies by cookie, as set by the advertising network. |
Ad-measurement cookies | Cookie | Our advertising network | Counts views and clicks so ad performance can be reported and billed. | Varies by cookie, as set by the advertising network. |
Where consent is legally required for personalized advertising, we will collect it through a Google-certified consent management platform before any third-party ad request is made. Without that consent you are served our own ads or non-personalized ads instead — enforced on our servers when the ad is selected. Advertisers never receive your chat messages, voice transcripts, the memories artists hold about you, or your email address. See Section 6 of the Privacy Policy.
4. Your choices
- Browser controls. Every major browser lets you block or delete cookies and clear site data. Blocking the sign-in cookies will stop you from being able to sign in, and the Service will not work.
- Consent control. Where a consent prompt applies to you, you can change your advertising choices at any time from the consent control on the site.
- Opting out of personalized ads. Before personalized advertising runs for California residents, we will provide a “Do Not Sell or Share My Personal Information” control and will honor Global Privacy Control (GPC) browser signals as an opt-out request. Opting out does not remove ads — it leaves you with our own ads or non-personalized ads.
- No ads at all. A paid Patron subscription removes advertising from the Service.
5. Children
The Service is intended only for adults age 18 and older. We do not knowingly collect personal information from, or serve advertising to, anyone under 18.
6. Changes and contact
We may update this Policy from time to time and will update the “Last updated” date above. Questions? Email support@auraverse.fm or use our contact page.