Privacy

Auralink is a focused engineering company. This policy describes how the company handles personal data submitted through auralink.studio, including the contact form and any newsletter we operate. Plain English first; the legal language sits underneath where it is needed.

For privacy questions, write to privacy@auralink.studio. We answer within 30 days, usually sooner.

We collect only what we need to reply to you and run the site.

• Contact form. Name, work email, company, role, project type, budget band, timeline and the brief you send.
• Newsletter, if you subscribe. Email address only.
• Server logs. IP address, user agent, requested URL and timestamp — the default web request log.
• Analytics. Aggregated, cookieless page-view counts. No third-party advertising trackers.

• To reply to your enquiry and route it to the right person.
• To send the newsletter you subscribed to, if you did.
• For security, debugging and abuse prevention.
• To understand which pages of the site are useful, in aggregate.

We do not sell personal data. We share data with a small list of subprocessors, each chosen for one defined purpose:

• Vercel — hosting and edge delivery.
• Resend — transactional and newsletter email.
• Cloudflare — CDN and form spam protection (Turnstile).
• Plausible — cookieless aggregate analytics.
• Postgres — encrypted storage of contact submissions, EU region.

We update this list when it changes. Material changes are flagged on the “last updated” line above and, for active subscribers, announced by email.

No marketing cookies. No advertising pixels. No third-party trackers.

• One first-party cookie powers Cloudflare Turnstile on the contact form. It expires with the form session.
• Analytics is provided by Plausible, which is cookieless and stores no personal identifiers.
• We do not transfer data to advertising networks.

• Contact submissions. Kept for 24 months for project continuity, then deleted.
• Newsletter subscriptions. Kept until you unsubscribe; unsubscribe is a one-click link in every email.
• Server logs. Kept for 30 days, then rotated out.
• Analytics aggregates. Retained indefinitely with no personal identifiers attached.

Under GDPR and equivalent regimes, you can request access, correction, deletion or portability of your data, and object to specific uses. To exercise any of these:

• Email privacy@auralink.studio from the address you used to contact us, or include enough context for us to identify the record.
• We respond within 30 days, usually sooner.
• You may also lodge a complaint with your local data protection authority.

For privacy, deletion or access requests:

• Email: privacy@auralink.studio
• For everything else, including new engagements: hello@auralink.studio

We update this page whenever the underlying practice changes. The “last updated” date at the top of the page reflects the most recent revision.