{
  "format": "aurel-data-inventory-v1",
  "updated": "2026-10-29",
  "summary": "What Aurel stores, where, for how long and why. Nothing about which websites you visit or what you send is stored anywhere.",
  "not_stored": [
    "websites, domains or IP addresses you connect to (no access logs on any node; Xray loglevel 'warning', no access log; sing-box and Hysteria2 logging disabled)",
    "DNS queries",
    "the content of your traffic",
    "the User-Agent or IP address that fetches your subscription (the subscription service reads the User-Agent only to choose a format and does not log requests)",
    "your full IP address in any database"
  ],
  "stored": [
    {"item": "sign-in e-mail, verified flag, hashed password (PBKDF2-SHA256), keyed hash of the recovery code", "where": "customer database", "kept": "while the account exists; removed by account deletion", "why": "sign-in and recovery"},
    {"item": "signed-in sessions: creation time, last activity, coarse network hint (IPv4 first three parts, e.g. 203.0.113.x; IPv6 first three groups)", "where": "customer database", "kept": "until sign-out or expiry (at most 7 days)", "why": "the 'signed-in devices' list"},
    {"item": "anti-guessing counters (keys are keyed hashes, not addresses)", "where": "customer database", "kept": "at most 1 day after their window ends", "why": "limit password and code guessing"},
    {"item": "customer number, plan, expiry, data allowance, data used", "where": "business database and VPN panel", "kept": "while the account exists", "why": "billing and quota"},
    {"item": "data-usage totals per account, per node, per hour; last time online", "where": "VPN panel (Marzban)", "kept": "hourly breakdown at most 90 days (trimmed daily); account total and last online while the account exists; all deleted with the account", "why": "quota, fairness, troubleshooting"},
    {"item": "orders and payments: amount, date, channel, payment reference", "where": "business database", "kept": "as accounting law requires; on account deletion they are kept anonymously (random id, no e-mail)", "why": "accounting and refunds"},
    {"item": "USDT payments: transaction id, sending and receiving address, amount, time (public blockchain data)", "where": "business database", "kept": "with the order; the sending address is erased on account deletion", "why": "matching a transfer to an order"},
    {"item": "Alipay red-packet code (encrypted); card and Alipay online payments are handled by Stripe (no card numbers stored)", "where": "business database / Stripe", "kept": "with the order", "why": "verifying payment"},
    {"item": "Telegram user id and username, only if you link the bot", "where": "business database", "kept": "until you unlink or delete the account", "why": "identify the account in the bot"},
    {"item": "check-ins, invitations, redemptions, rewards, setup progress you confirm, support tickets", "where": "business database", "kept": "while the account exists; removed by account deletion", "why": "the features themselves"},
    {"item": "one-trial rule: keyed hashes of the e-mail address and network (no readable address)", "where": "business database", "kept": "kept after account deletion", "why": "one free trial per address"},
    {"item": "deleted-account tombstone: keyed hash of the service username", "where": "business database", "kept": "permanently", "why": "a deleted account id is never issued again"},
    {"item": "server system logs on nodes and the control server: firewall drops of unsolicited packets, SSH and fail2ban events", "where": "each server", "kept": "7 days (journald MaxRetentionSec=7day, syslog rotated daily, 7 files)", "why": "keeping the servers secure"},
    {"item": "encrypted off-site backups of the databases", "where": "Backblaze B2", "kept": "rotated; at most 60 days", "why": "disaster recovery"}
  ],
  "processors": ["Cloudflare (website, DNS; sees visitor IPs at its edge; Workers logs are not enabled)", "server providers (Vultr, LisaHost, Misaka)", "Stripe (card and Alipay online payments)", "Resend (verification e-mails)", "TronGrid (reading public USDT transfers)", "Telegram (only if you use the bot)", "Backblaze B2 (encrypted backups)"],
  "delete_your_account": "Customer centre -> Settings -> Delete account permanently (e-mail code + typed confirmation)."
}