Privacy Policy
Last updated: August 27, 2026
Aeloria ("we," "us," or "our") operates the website www.useaeloria.com and the Aeloria Creator Portal. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.
By using our website or submitting an application, you agree to the collection and use of information as described in this policy.
1. Information We Collect
Information you provide directly:
- Application data: When you apply to join the network, we collect your full name, email address, YouTube channel URL, primary niche, subscriber count, average views per Short, YouTube Partner Program status, Shorts RPM (if provided), and payout country.
- Account data: If approved, we create a creator account with your email address and a password set by our team (which you can change at any time).
- Video submissions: When you log videos through the Creator Portal, we store the video URL, publish date, and which catalog track was used.
- Communications: Any emails or messages you send to us.
Information collected automatically:
- Usage data: We collect standard server logs, including IP addresses, browser type, pages visited, and timestamps. This data is used for security, abuse prevention, and basic analytics.
- Cookies: We use session cookies to keep you signed in to the Creator Portal and the admin dashboard. These are strictly functional — we do not use tracking cookies, advertising cookies, or any third-party analytics cookies.
2. How We Use Your Information
We use the information we collect to:
- Review and process your creator application.
- Communicate with you about your application status, account setup, and earnings.
- Operate the Creator Portal, including tracking earnings, managing your account, and displaying your dashboard data.
- Calculate and distribute Music Pool revenue shares.
- Send transactional emails related to your account (application updates, earnings reports, password resets, account changes).
- Prevent fraud, abuse, and unauthorized access to our platform.
- Improve and maintain our website and services.
3. Information Sharing
We do not sell, rent, or trade your personal information to third parties. We may share limited information in the following circumstances:
- Service providers: We use Resend to deliver transactional emails. Your email address is shared with Resend solely for the purpose of delivering messages to you. We use Railway for hosting. These providers process data on our behalf and are contractually obligated to protect it.
- Legal requirements: We may disclose information if required by law, regulation, legal process, or enforceable governmental request.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email if your data becomes subject to a different privacy policy.
4. Data Retention
We retain your application data for as long as necessary to process your application and, if approved, for the duration of your participation in the network. If your application is rejected, we retain your data for up to 12 months in case you reapply, after which it is deleted.
If you leave the network, we retain earnings records and payout history for up to 24 months for accounting and tax purposes, after which personally identifiable information is anonymized or deleted.
5. Data Security
We take reasonable measures to protect your personal information, including:
- Passwords are hashed using scrypt with random salts — we never store plaintext passwords.
- Session tokens are signed with HMAC-SHA-256.
- CSRF protection on all state-changing API requests.
- HTTPS encryption for all data in transit.
- Rate limiting on authentication endpoints to prevent brute-force attacks.
No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.
6. Your Rights (GDPR)
If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following legal bases: performance of a contract (operating your creator account and paying your revenue share), legitimate interest (security, fraud prevention, affiliate attribution), legal obligation (accounting and tax records), and consent (loading YouTube video previews — see Cookies below).
You have the right to:
- Access the personal data we hold about you (Art. 15 GDPR).
- Correct inaccurate or incomplete data (Art. 16).
- Delete your account and personal data, subject to legal retention requirements (Art. 17).
- Restrict or object to processing based on legitimate interest (Art. 18, 21).
- Data portability — receive the data you gave us in a machine-readable format (Art. 20).
- Withdraw consent at any time for any processing based on consent, without affecting the lawfulness of processing before the withdrawal (Art. 7).
- Lodge a complaint with your local data protection supervisory authority (Art. 77).
To exercise any of these rights, contact us at hello@useaeloria.com. We will respond within 30 days.
7. Cookies & Local Storage
Strictly necessary cookies (no consent required — the site cannot function without them):
- sid: Admin session cookie. Set when an administrator signs in. Expires when the browser is closed.
- csid: Creator session cookie. Set when a creator signs in to the portal.
- asid: Affiliate session cookie. Set when an affiliate signs in to their dashboard.
Functional cookies and local storage (first-party, never shared, no tracking across sites):
- ref (cookie, 60 days) and aeloria_ref (local storage): remember which affiliate referred you so we can credit them if you apply. Set only when you arrive through an affiliate link.
- aeloria_consent_v1 (local storage): remembers your cookie-banner choice so we don't ask again.
Consent-based (YouTube previews): the video showcase on our homepage shows thumbnails and titles served from our own server — your browser never contacts YouTube or Google for these. Only if you choose "Accept all" in the cookie banner do we load playable YouTube previews (via youtube-nocookie.com) when you hover a card; YouTube may then set its own cookies under Google's privacy policy. You can change your choice at any time via Cookie preferences in the footer.
Fonts are self-hosted on our servers — no requests are made to Google Fonts. We do not use Google Analytics, Facebook Pixel, or any third-party tracking technologies.
8. Third-Party Links
Our website may contain links to external sites (YouTube, Spotify, etc.) that are not operated by us. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies.
9. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor without verified parental consent, we will take steps to delete that information promptly.
10. International Data
Our servers are located in the United States and the European Union. If you are accessing our services from outside these regions, please be aware that your data may be transferred to, stored, and processed in a jurisdiction with different data protection laws than your own.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. If we make material changes, we will notify active creators via email.
12. Contact
If you have questions about this Privacy Policy or how we handle your data, contact us at: