Privacy Policy

This policy covers phxtemplates.com and aurorameter.com, which share one account system and one database, and is operated by Liam Killingback (“we”). It applies to visitors, newsletter subscribers and customers.

Account: your email address and a hash of your password (never the password), whether the email is verified, and session tokens so you stay signed in.

Purchases: a record of each order and subscription: the product, amount, currency, Stripe's customer, session, payment and subscription identifiers, and for subscriptions the plan, application count, status and period. We never see or store card numbers. For subscriptions we store Stripe's opaque card fingerprint, a token that identifies a card without revealing it, purely to enforce the one-trial-per-customer rule.

Aurora Meter Pro: the name of each Hex organisation key we issue you and when it was issued or revoked (the key's secret is emailed once and not stored), plus the names, URLs and notes you give your licensed applications.

Messages: anything you send through the contact form, and email you send to our aurorameter.com or phxtemplates.com addresses.

Newsletter: your email and the page you signed up from, after you confirm the double opt-in.

Usage: anonymous page views and events (which product was viewed, when a checkout started or completed) through Google Analytics, and standard server logs with IP addresses kept briefly for security.

To run your account, deliver what you bought, issue and revoke package keys, bill subscriptions, answer your messages, send the emails described below, prevent trial and refund abuse, and understand which pages and products people use. We do not sell or rent personal data and we do not use it for advertising.

Transactional email only unless you opt in: the welcome and verification email, password resets, purchase and package-key emails, subscription changes (quantity, trial ended, subscription ended), refund notices, and replies to your messages. The newsletter is separate, requires confirmation, and every issue has an unsubscribe link.

• Stripe handles every payment and stores your card; we receive the identifiers listed above and the card fingerprint.
• Resend delivers our email and receives mail sent to our addresses.
• Hex.pm hosts the private package repository; the keys we issue exist in our Hex organisation under a name derived from your account id.
• Google Analytics collects anonymised usage data, with IP anonymisation and cross-domain linking between our two sites so a visit is counted once.
• Fly.io hosts the application and its database.
• Cloudflare provides DNS and edge protection for our domains.

Each processes data only to provide its service to us, under its own privacy terms.

A session cookie keeps you signed in and protects forms against forgery; an optional remember-me cookie keeps you signed in for longer if you tick the box. Google Analytics sets its own cookies to tell returning visitors apart. There is no advertising or third-party tracking beyond that. Blocking cookies stops sign-in from working; blocking analytics changes nothing for you.

Account and purchase records are kept while your account exists, and purchase records for as long as tax and accounting law requires after that. Contact messages are kept until answered and archived. Expired session and sign-in tokens are pruned automatically. Analytics data follows Google's default retention.

You can see and change your email from your account, and download or revoke package keys there. Email us to get a copy of everything we hold about you, to correct it, or to delete your account; deletion removes the account and everything not required for our financial records, and revokes any live package key. We answer within 14 days. If you are in the EU or UK you also have the right to complain to your data protection authority.

When this policy changes the effective date at the top moves; material changes are announced by email to customers. Questions and requests go to phxtemplates@gmail.com or the contact page. See also our terms of service.