Privacy policy.

01Scope

This policy describes how Sick Aura Inc. ("SICK AURA", "we", "us") collects, uses, and protects information at sickaura.com. It covers the marketing site only. When SICK AURA opens an online store, a separate, broader privacy notice will govern orders, accounts, and payments.

02What we collect

Because this is a coming-soon landing page with no login, no checkout, and no signup form, the data we collect is minimal:

• Analytics (via Google Analytics 4) — anonymized IP address, browser type and version, operating system, page URL viewed, referring page, approximate country, screen size. IP anonymization is enabled at collection. Only set after you accept the cookie banner.
• Local browser storage — one entry: cookies-decision (your accept/decline choice). Stored in your browser; never transmitted to us.
• Email correspondence — if you email us (for example to reserve a piece from an upcoming drop) at david@knexmail.com or hello@sickaura.com, we receive the email address you wrote from and the message body.

03What we do NOT collect

• No name, address, phone number, government ID, or any other identity data — there is no form on this site.
• No payment data, card, or financial information — there is no checkout yet.
• No biometric or precise location data beyond approximate country (derived from anonymized IP).
• No data from minors (this site is not directed at children under 16).
• No advertising or behavioral profiling. No third-party trackers besides Google Analytics.

04Why we collect it

• Analytics: understand which pages and languages visitors arrive at, identify bugs, plan drops and content. Legal basis: your consent via the cookie banner (Article 6(1)(a) GDPR).
• Local storage: remember your choices so we don't re-prompt. Legal basis: strictly necessary for site functionality you requested.
• Email correspondence: reply to you and, if you asked, notify you when a drop goes live. Legal basis: legitimate interest in answering your message (Article 6(1)(f) GDPR).

05Who we share it with

We don't sell, rent, or trade your data. Limited sharing happens with:

• Google LLC as a data processor for Google Analytics, under Google's data-processing terms. Data flows to Google's US servers. Google relies on Standard Contractual Clauses + the EU–US Data Privacy Framework for cross-border transfers.
• Cloudflare as the hosting and CDN provider — receives requests but does not retain visitor analytics beyond standard server logs.
• Email providers we use for our own contact addresses (transit and inbox only).

We will disclose data to authorities only when compelled by valid legal process.

06Cross-border data transfers

Sick Aura Inc. is based in the United States. Google Analytics servers are in the United States, European Union, and other regions. By using this site (and accepting the cookie banner), you agree that anonymized analytics data may be processed outside your country of residence. The safeguards are: Standard Contractual Clauses for EU-to-US transfer, IP anonymization at collection, no advertising identifiers, no cross-site profiling.

07Retention

• Google Analytics data: retained 14 months by default at Google's processing layer, then automatically deleted.
• Local storage entries: kept until you clear browser storage. We don't have access to them.
• Email correspondence: retained as long as the conversation thread is active and for 24 months thereafter for record-keeping; then deleted unless legally required to retain longer.

08Your rights

Depending on your jurisdiction, you have some or all of the following rights:

• Access — request a copy of any data we hold about you.
• Rectification — correct inaccurate data.
• Erasure ("right to be forgotten") — request deletion of your data.
• Restriction — limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — opt out of analytics anytime via the cookie banner Decline button or by clearing browser storage.
• Object — to processing based on legitimate interest.
• Lodge a complaint with your local data protection authority (e.g. the ICO in the UK, a supervisory authority in the EU, the ANPD in Brazil, or the California Privacy Protection Agency).

To exercise any right, email david@knexmail.com. We respond within 30 days.

09Security

The marketing site is delivered over HTTPS with HSTS. Local storage entries never leave your browser. Email correspondence is protected by the security controls of our email providers. When we open an online store, additional safeguards will cover orders and payments and will be described in a separate customer privacy notice.

Security disclosures: david@knexmail.com.

10Children

This site is not directed at children under 16. We do not knowingly collect data from minors. If you believe a minor has provided data through email, contact us and we will delete it.

11Changes to this policy

When material practices change, we will update the Effective date at the top of this page and re-prompt visitors with the cookie banner. Significant changes will also be announced on the homepage before they take effect.

12Contact

Data controller: Sick Aura Inc., United States
Founder & privacy contact: David Otero — david@knexmail.com