Privacy & data protection

Who is responsible?#

The operators of Aurora FUT (Aurora), based in the United Kingdom, are responsible for the website processing described here. Contact hello@onlyonemzy.com about privacy or your personal data.

This notice covers aurorafut.co.uk (formerly aurorafut.com), website sign-in, the Aurora Club viewer and messages to our privacy contact. Separate game services hold their own account and gameplay records. For a game or Discord-community request, tell us which service is involved so we can identify the relevant records and people responsible.

Information we use#

Visits: IP address and technical request details, such as the page address, browser information and request time, to deliver and protect the website.
Discord sign-in: Discord user ID and display name or username, with sign-in and expiry times. We request identity permission, not access to your messages or Discord password. Discord access tokens are used during sign-in and are not retained by the website.
Aurora Club: your linked game account, access restrictions, squad, cards, coins and statistics. The viewer reads existing game data; it does not change your players or balances.
Contact: your email address, messages and details you choose to send. Avoid sending passwords, session cookies or unnecessary sensitive information.

Data comes from your browser, Discord, Aurora’s account and game records, or directly from you.

Why we use it#

Our legitimate interests are operating the community website, recognising your sign-in, showing the correct club, preventing misuse and answering support requests. We consider the effect on you and limit processing to what is needed for these purposes.

We also use data when required by law, including handling data-rights requests. If an optional feature relies on consent, we will ask separately and explain withdrawal. Visiting the website is not consent to unrelated processing.

Sign-in is optional, but we cannot identify your club without your Discord identity. The website does not build advertising profiles or make solely automated decisions with legal or similarly significant effects.

Cookies and browser storage#

Sign-in: a temporary security cookie lasts up to five minutes; a session cookie lasts up to seven days. Signing out revokes that website session.
Preferences: theme, display settings and a previous-sign-in indicator stay in your browser until changed or cleared. The indicator is also cleared when the site recognises you are signed out; it cannot grant account access.

The website has no analytics or advertising scripts. Clearing site data removes preferences and signs you out locally. Blocking sign-in cookies prevents sign-in, but public documentation remains accessible.

Service providers and international processing#

Aurora operators and hosting, infrastructure and email providers may process information needed to run the service or answer you. We may disclose information where legally required.

Discord operates its own authentication and community platform under its privacy policy ↗. Some club artwork loads from static.wefut.com, which receives your IP address and image-request details. Those URLs do not include your Discord ID or private club statistics.

Aurora is operated from the UK. External providers may process information outside the UK and EEA; their notices explain their arrangements. Contact hello@onlyonemzy.com for the recipients, locations and transfer safeguards relevant to data we control.

Personal developer-payment links and community sponsorships do not provide access to your private club data through this website. External services have their own privacy notices.

How long information is kept#

Website sessions expire after seven days or are revoked sooner by sign-out. Expired records cannot authenticate and are removed when the session store is next rewritten. Session expiry does not mean every stored copy is erased at that exact moment. Browser preferences remain until changed or cleared.

The website keeps no separate permanent club snapshot. Signing out does not delete your source game account or gameplay records.

Support, security and operational records are kept according to whether a request is resolved, an incident remains under investigation, or information is still needed for a legal obligation or claim. Log rotation and backup replacement affect stored copies. Ask us for retention details for a specific record or to request deletion.

Your privacy rights#

Where UK GDPR or EU GDPR applies, you may request access, correction, erasure, restriction and, where applicable, a portable copy of your data. Rights have conditions and exceptions. You may withdraw consent where it is the basis for processing, without affecting earlier lawful use.

Residents of other countries can use the same contact route to exercise rights under applicable local privacy laws. This notice does not limit those rights.

European Commission: your data-protection rights ↗

Your right to object#

You can object to processing based on legitimate interests.

Email hello@onlyonemzy.com and explain your situation. We will consider the objection and stop unless a permitted overriding reason applies. You can object to direct marketing at any time.

Requests and complaints#

Email hello@onlyonemzy.com with your request and the service concerned. Include only the account details needed to locate your data. We may request proportionate identity verification before disclosure or deletion.

We normally respond to UK/EU data-rights requests within one calendar month. If the law permits extra time or requires more information, we will explain why. Requests are normally free.

You can complain to the UK Information Commissioner’s Office (ICO) ↗. Where EU/EEA law applies, you may complain to the authority where you live, work or where the alleged infringement occurred: find your authority ↗. Elsewhere, contact your relevant local regulator.

Notice updates#

We will revise this page and its date when website data handling changes. If a change needs a separate notice or consent, we will provide it separately.