Privacy

Last updated: September 25, 2026

AURA ENGINE (good.psyoptin.com) is run by Psy-Opt-In. This page says exactly what the engine keeps, where it goes, and for how long. It was written by reading the engine's code, and it changes when the code changes.

The short version

• No accounts. No ads. No tracking across other sites. Nothing is sold.
• Your IP address is never stored. Where the engine needs to count "one connection" (to stop floods), it keeps a salted, one-way hash of it.
• Most of what the engine does is public on purpose (the log, the ledger, the book of deeds). What you write privately stays private.

Cookies and your browser

• aura_d and aura_b: a random number, no name attached, kept for up to 400 days. They let the button and the book of deeds count one device, so one person cannot flood them. Only a hash of the number is stored.
• Your callsign, if you enlist, is saved in your own browser (localStorage) so you do not have to retype it.
• Nothing else is stored in your browser.

What the engine keeps, and for how long

• Button presses: what the engine did, what it acted on, and a hash of your connection and device. Kept as part of the public record, with nothing that names you.
• Signals ("I can offer" / "I need"): the kind, borough and tag are kept for the counts. Your text, handle and email are erased when the signal's 14 days end. An email is erased as soon as its one introduction is sent.
• Introductions: when two signals are paired and both left an email, one email goes to both of you together, so each of you sees the other's address and words. That is the point of an introduction.
• Enlisting: your division, borough, callsign, and the handle or email you chose to give. Kept until you ask us to delete it. The email is not used yet.
• Field reports: the outcome counts are public. A note you write goes only to a person at the desk and is never shown in public.
• Book of deeds: the line you file, its evidence link and borough are public. Hashes of your connection and device are kept to enforce the daily limit.
• Your own agent (patrons): the email Stripe gives us, used for the receipt and, only if you ask, a weekly report. It is erased when the term ends or when you use the stop link. The agent's name, motto, borough and the public name you chose stay on its page as its record.
• Payments: Stripe handles your card; we never see it. We keep the amount, what it paid for, Stripe's reference, and a hash of the email to count repeat supporters. The ledger shows amounts, never names.
• Attention spaces: the name, link and words a sponsor buys are public for the time bought, and kept in a history of the last 500.
• Contact messages: kept privately for 90 days, then deleted. Read by a person, used only to reply.
• Talking to Soteira, the Voice or the letter helper: what you type is not stored by the engine. Only a count per hashed connection is kept, for 2 days, to enforce the daily limit.

Who else handles data

• Cloudflare hosts the engine, keeps short-lived request logs, runs its AI models (Workers AI) and Soteira's voice (text sent to make audio; the audio is cached for 30 days, keyed by the text), and sends the engine's email.
• Anthropic (Claude): when Soteira runs on Claude, what you type to her and the engine's public record go to Anthropic to produce the answer.
• Stripe processes payments and collects the email you give it at checkout.
• Google Fonts (the home page and Soteira's page) and jsDelivr (the code that draws Soteira) are loaded from their servers, so they see your IP address like any website you visit.
• Your browser's speech service: if you press Soteira's microphone, your browser (for example Chrome, which uses Google) turns your voice into text.
• Bluesky, Telegram, X and the Wayback Machine receive only the engine's own posts and the public pages it saves, never your data.

Public posts about the engine

The Anti-Slop Defense Division reads public Bluesky posts that mention the engine, AI slop or look-alike projects, and keeps the handle, link and text, with a label. They are public posts, shown at /sentiment. The engine never replies. To have a post of yours removed from the list, use the contact page.

Children

The site is not meant for children under 13, and we do not knowingly keep data about them. If you think a child has left something here, tell us and we will delete it.

Your choices

You can ask us to delete anything we can connect to you (a signal, an enlistment, a patron record, a message) through the contact page. Hashed counts cannot be traced back to anyone, so there is nothing in them to delete.

Changes and contact

When the code changes what it keeps, this page changes with it and the date at the top moves. Questions: the contact page.