AuraEngine

Privacy

AuraEngine works on your computer. It has no accounts, no analytics and no tracking, and your music is never uploaded. This page lists everything the app sends over the network.

Crash reports

A report helps find a fault that cannot be reproduced elsewhere. It says what the program was doing, and nothing about you or your music.

• After a crash, a hang or a power cut, the report window opens at the next start. The report leaves only when you press Send.
• The ! button at the top of the window opens the same report at any time.
• The box Always send automatically is off by default. Only if you tick it, reports after a crash, a hang or a power cut go without asking.
• Show everything displays the exact text of the report before it is encrypted.
• Save to file keeps the encrypted report on your computer, so you can send it however you like.
• A report you sent that could not go (no network, the server asleep) waits on your computer, still encrypted, in the outbox folder of the program's data folder. The program tries again at each start and once an hour, and deletes the file once it has gone, or after 14 days. One that the box sent goes only while the box is ticked. Closing the window does not cancel a report that waits; to cancel, delete the file.

What a report contains

• Program version and operating system.
• Hardware model details: processor, memory, video card and its driver, free disk space.
• Sound settings and output format.
• Your tracks as numbers only: format, sample rate, length, rounded size.
• What the program was doing: the stage, the error, the technical trace.
• The end of the program's log, with private text replaced.
• Anything you type in the "What happened" field. Please leave personal details out of it.

What a report never contains

• File names, folders, titles, artists, albums.
• Your user name, computer name, audio device names, radio addresses or station names.
• Any lasting ID of you or your computer. Each report has only its own random code, like AE-7K3F-Q9, so two reports cannot be linked to each other by an ID.

Private text is replaced before the report is made: track#3 instead of a title, <path> instead of a folder. If a known name is still found in a line of the log, that whole line is dropped. Automated tests guard these rules, and a release is not built if they fail.

Who can read a report

The report is compressed and encrypted on your computer, with a public key built into the program (X25519 and XSalsa20-Poly1305, a libsodium sealed box). Only the developer's private key, kept offline, can open it. The server that receives the report cannot read it.

Where it is kept, and for how long

• Encrypted reports are stored in a private dataset on Hugging Face.
• They are deleted after 90 days, and so are the opened copies the developer works with.

Your IP address

We do not store it. The receiving server holds it in memory only to limit the number of reports per hour. Hugging Face, as the host, may keep standard access logs of its own, as any web host does.

Deleting a report

Write the code of your report to auraengine.dev@gmail.com, and that report will be deleted. Without the code, nobody can tell which report is yours.

Every connection the app makes

Each of these servers sees your IP address, as any server you connect to does.

A few links open in your own browser and not in the app: the VB-Audio and Microsoft WebView2 download pages, autoeq.app, shadertoy.com and the release pages. The interface loads no external fonts or scripts.

The code is open: github.com/ToxaDev/aura-engine.