Security & data

A platform that touches intimacy must store as little of it as possible. Here is exactly how Aurora is built.

Minimisation by design

No participant ever sees another's full charter. The server computes overlaps and returns only three lists: shared, to discuss, excluded.

Only a SHA-256 fingerprint — an irreversible string — can be anchored. A fingerprint never allows the content to be reconstructed.

Every session carries an expiry date. After that, it can no longer be confirmed and holds no value.

Database access rules only let each person read their own answers. Session membership is verified on every request.

Access, correction, export and full account deletion from your space. Deletion erases profiles, charters, sessions and messages.

Aurora does not certify anyone's identity, does not replace vigilance, and is not automatic legal proof. It is a clarity tool, not a court.