Last Updated: September 16, 2026
Aurora Walks was built on the belief that your memories and movements belong only to you. The Halloween website uses cloud services for optional display submissions and sign-in, as described below. Showing your location on the tour map is optional; Aurora Walks does not save those location updates.
All data generated within the app—including your GPS routes, voice notes, and walk collections—is stored in your private Apple iCloud container. This means:
To provide path tracking features, Aurora Walks requires access to your device’s location. This data is used exclusively to draw your walking routes and pin your voice notes. Location data is stored only on your local device and your private iCloud account. It is never transmitted to any third-party server.
When you record a voice note, the audio file is saved locally to your device and synced to your private iCloud. We do not use third-party transcription services that store your audio; all processing remains within the secure Apple ecosystem.
We do not use any third-party analytics (like Google Analytics or Meta Pixel) in the app or on this website. We do not track which features you use, how long you walk, or where you go. Your usage is completely invisible to us.
You have absolute control over your data. At any time, you can:
The Halloween tour saves the IDs of displays you mark visited in this browser’s local storage. The checklist is not sent to Aurora Walks and does not sync between devices. Use Reset on the tour page or clear your browser’s site data to remove it. If you tap Show my location, your browser asks for permission and shows your position and approximate accuracy on the map. Aurora Walks does not save these coordinates or send them to its backend. Location updates stop when you stop sharing, leave the page, or put it in the background. The map provider receives tile requests for the area you view.
Online display submissions store your name, email, address, and display theme privately with the organizers. A magic link verifies your email and opens your account; Google sign-in is also supported when enabled. Firebase Authentication manages sign-in, and the site remembers the email used to complete an email link in this browser until verification. Submitted details and uploads use Google Cloud Firestore and private Cloud Storage. Sign-in emails are delivered through Resend. Approved display names, addresses, schedules, stories, and media are public; contact details are not included in the public display feed.
The map requests tiles from OpenStreetMap, and the page loads its map library and fonts from external providers. These providers receive ordinary web request information, such as your IP address. Opening directions shares the selected destination with Apple Maps, Google Maps, or Waze. In-browser voice recording requests microphone access only when you press Record. Recordings stay on your device until you press Upload; choosing a photo or video sends it to private storage for review.
If you have any questions about this Privacy Policy or how your data is handled, please use the form below to get in touch. We use Formspree to deliver your message securely to our team.