Aurora privacy information
a platform member, who we share it with, how long we keep it, and your rights. This page explains what is different about Aurora.
1. Summary
-
We never receive your form answers. Everything you type into the DTAC and DPIA helpers is stored only in your web browser and in any project file you choose to download. The Word documents are created on your device.
-
Aurora does not track what you do. It does not record when you use it, which form you open, or whether you download anything.
-
Aurora checks that you are signed in and allowed to use it, and the platform keeps a record that you accepted the Aurora additional terms and read this page (see section 3).
-
Aurora shares nothing with anyone, and does not use analytics, advertising or tracking cookies.
2. Your form answers
The DTAC and DPIA helpers run in your browser. Your answers, supporting details, risk tables and any names or details you type in (including details about other people, such as contacts or officers named in your forms) are stored only:
-
in your browser's local storage on the device you are using; and
-
in any project file (.json) or Word document you download.
This information is never sent to us, so we cannot see, recover, provide or delete it. If you clear your browser data, it is deleted from that browser. On a shared computer, each signed-in person's answers are kept separately in the browser, but anyone using the same browser profile and platform account can see them, so remove your projects from the browser when you have finished. You control, and are responsible for, the project files and documents you save and share. Evidence documents go directly from you to the organisation you choose; Aurora never uploads them.
Earlier test (beta) versions of Aurora stored form answers on a different service. All of that stored content was permanently deleted on 30 September 2026.
3. What is recorded when you use Aurora
| Data | Why | Lawful basis | How long |
|---|---|---|---|
| That you are signed in and allowed to use Aurora | So only people allowed to use Aurora can | Contract | Nothing extra is stored; your platform account is kept as the Privacy Notice describes |
| A record that you accepted the Aurora additional terms and read this page: which version, your decision, the date and time, that it was through Aurora, and (for the terms) the IP address and browser used | As evidence of what you agreed to and when | Contract; legitimate interests in being able to show what was agreed | As the Privacy Notice sets out for consent and acceptance records; your identity is removed from the record if you ask us to erase your data |
| If we invited you to Aurora by email: your email address, who invited you, and when | So you can join | Legitimate interests in inviting named people | Until you accept; if you do not, deleted six months after the invitation expires |
These records are held in the platform's agreements register with your other platform records.
4. Cookies and storage on your device
Aurora uses only storage that is strictly necessary to provide the service you ask for, so we do not ask for consent to it:
-
the platform's sign-in cookies, described in the Privacy Notice;
-
browser local storage, which holds your DTAC and DPIA answers on your device so you can carry on where you left off;
-
only if the platform's agreements register is ever unavailable: one cookie,
aurora_terms, which remembers in your browser that you accepted the Aurora additional terms. It holds the version and a coded reference to your account, and lasts 12 months. In that case nothing is recorded on our systems.
5. Who we share data with
Aurora shares nothing. Using Aurora does not add you to any marketing list or pass anything to a partner organisation. The "Get more help" pages link to other organisations' websites; we do not pass any information about you or your answers to them, and their own privacy notices apply when you visit them. Aurora is hosted on the platform, as the Privacy Notice describes.
6. Your rights and contact
Your rights, and how to complain, are set out in the Privacy Notice. Because we never receive your form answers, we cannot provide, correct or delete them: they are under your control on your own device. To use your rights, or with any question about Aurora and your data, email community.management@outtherehealthtech.com.
7. Changes to this page
We will update this page if what Aurora does with personal data changes. If a change is significant, we will ask you to