BATTLES-AURA / PRIVACY

YOUR DATA.
MADE CLEAR.

Data used by the site, your account, and your orders.

01 / Data Controller and Contact

VANDOREL operates Battles-Aura. Business address: 47 rue Vivienne, 75002 Paris, France. Contact regarding your data: contact@battles-aura.com.

02 / Data Used

Your shopping cart stores the selected editions and quantities on your device. Display preferences are also saved on your device. This data does not constitute an order.

If you contact us via our contact form or by email, your email address, the subject line, the content of your message, and any optional information you provide (such as your first name, last name, username, or order reference) are used to respond to your inquiry. Your IP address is used temporarily to prevent spam or abusive submissions. Please do not send banking information or identity documents unless specifically requested.

Inquiries regarding a potential purchase are considered pre-contractual steps taken at your request. Other communications and site security measures are based on our legitimate interest in responding to visitors and preventing abuse.

03 / Your account and your training

Registration requires a username, an email address, a password (protected via hashing), your country, your stated city, and your age range. Email verification and session management help secure your personal space; your favorites and progress remain private. This data is used solely to provide the requested member area; it does not result in subscription to any newsletter. Accounts are available to individuals aged 15 and older in France, and 18 and older in all other countries.

You may choose to add a personal bio, a profile photo, and the number of signatures collected in your "Codex." These optional elements are stored within your private account on our OVHcloud server. Profile photos are resized, and their metadata is removed; they appear within your personal space and on your "My Profile" button whenever you are logged in. Your bio, photo, and stated rank are not displayed on the map. You may edit or remove these details via your profile; they are deleted from the active database along with your account.

04 / Your presence on the map

Adult members may choose to display their username and city to other logged-in members. This option is entirely voluntary and is disabled by default. If you select this option during registration, your username and city will appear on the map once your email address has been verified. You may also enable or disable this feature at any time via your profile settings. Accounts belonging to minors remain private. The map uses the center of the chosen city—never your GPS location or your postal address. Your email address and age range are not displayed to other members.

The map background is provided by OpenFreeMap. Accessing the map triggers requests to this provider, which receives information such as your IP address and the specific map areas requested; no email address or member profile data is shared with them. Please review their privacy policy.

05 / Recipients and data retention

To customize your Codex according to your specifications, we process your username, your optional quote, any uploaded illustration, the compiled PDF, and your approval of the preview. These elements are used to prepare and fulfill your order. The temporary preview expires after 30 minutes and is automatically deleted. If you link the preview to an order, a separate copy of the finalized PDF—along with the details required to verify your selections—is retained as part of that order; these items are not deleted when the preview expires. The PDF intended for printing is sent to Lulu; it is not published in any public gallery.

The website and professional email services are hosted by OVHcloud. Data is accessible to authorized personnel responsible for managing accounts, processing requests, and reviewing reports. This data is never sold. Account and logbook information is retained for the duration of the account's existence; the deletion option available within the member area removes the account, its active sessions, its map profile, and its logbook from the active database. Backup copies are secured and reserved exclusively for technical restoration purposes. In the event of a restoration, any previously submitted deletion requests must be re-applied before the account is brought back online.

Confirmation and recovery links expire after 30 minutes; sessions expire after 24 hours without renewal. Anti-abuse measures temporarily utilize your IP address and a hashed version of your email address. Reports and communications relevant to a complaint are accessible only to authorized personnel and are retained for the duration of the issue's resolution, and subsequently only for as long as is necessary for the defense of legal rights. Protection against abuse and content moderation are based on our legitimate interest in ensuring the safety of our community; your voluntary display on the map is based on your consent.

To prepare and fulfill your order, we process your name, email address, phone number, physical address, order contents, the version of the terms and conditions you accepted, payment references, and delivery tracking information. Payments are processed by Stripe; credit card details are not stored by Battles-Aura. Lulu receives the information required to print and deliver the Codex, along with the relevant book files. This data processing is necessary for the execution of our contract; accounting records are retained to comply with our legal obligations. Information relevant to potential complaints may be retained for the defense of legal rights.

Stripe and Lulu may process data outside the European Economic Area. Their respective policies outline the countries involved and the applicable safeguards—such as adequacy decisions and standard contractual clauses, depending on the nature of the transfer: Stripe’s policy and Lulu’s policy. You may contact us for further information regarding the safeguards applied to your data.

06 / Cookies and local storage

On your first visit, the server estimates your connection country from your IP address using a local geographic database to suggest a language. This lookup does not send your IP address to a geolocation provider or use your GPS location. Browser language preferences are used as a fallback when the country does not determine a language. The “ba_language” cookie stores only your chosen language for up to one year. Your manual choice takes priority; you can change it with the selector or delete the cookie in your browser.

No targeted advertising or third-party audience measurement tools are enabled. Media assets and fonts used on the storefront are served directly by the site. Session cookies are required for logging in and do not track your browsing activity across other websites.

The local storage key “battles-aura-cart-v1” retains your shopping cart, while “battles-aura-theme” stores your selected theme until they are deleted. You can clear site data via your browser settings; doing so will log you out, but it will not delete your account.

If you choose to save a draft of your customization, the session storage key “battles-aura-personalization-draft-v1” stores your text-based choices for that specific tab. This draft does not contain your image files or your consent preferences. It becomes unusable after 24 hours and is deleted the next time it is accessed; additionally, the browser automatically clears session storage when the corresponding session ends.

If you choose "Battles-Aura create my duel," Black Forest Labs receives only the predefined artistic instructions and a random reference to generate the drawing. Your username, quote, contact details, and any uploaded image are not sent to this provider. The drawing remains private, and you must select it before compiling the PDF. To prevent abuse, a connection fingerprint is used to track the number of requests; previews are temporary. The provider’s guarantees and data processing locations are described in their privacy policy.

07 / Your rights

You can edit your profile, remove your presence from the map, and delete your account via your member area. Depending on the specific processing activity, you may also request access, rectification, erasure, restriction, or portability of your data, or exercise your right to object, by writing to contact@battles-aura.com. Proportionate identity verification may be required in the event of reasonable doubt. A response is generally provided within one month, subject to any extensions permitted under the GDPR.

You may submit a complaint to CNIL.

Updated: November 1, 2026.