Privacy
Aureus is a practice app. It never asks for a seed phrase, a private key, or a card number, and there is no field anywhere in it for any of them. This page says what it does collect and how long it keeps it.
Last updated 1 October 2026.
Who we are
Aureus is based in Port Orchard, WA. You can reach us by email at hello@tradeaureus.com.
Aureus is a trade name of Genetti Enterprises LLC.
What we never ask for
We never ask for a seed phrase, a recovery phrase, a private key, or an exchange key that can move money. No part of Aureus has a box to type one into. If a site claiming to be us ever asks you for one, it isn't us.
We never see your card number either — see “Paying for a subscription” below.
Wallet addresses you paste
You can paste a public Bitcoin or Ethereum address to see what it holds. A public address is not a secret and it cannot be used to spend anything.
Balances read from a public address are read once and discarded. Nothing about an address is stored.
To find out what an address holds, we have to ask someone else, and your address travels in that question. It goes to Blockstream for Bitcoin and to Alchemy for Ethereum, which means it will appear in their own server logs. When you look up a token's published source, its contract address goes to Sourcify. Etherscan is used only as a fallback, when one of those cannot answer. We can't un-send it. All of them are named on our data and attributions page, with exactly what reaches them.
Your account
You can sign in with an email address and password, or with Google. If you use Google, we ask Google for your email address and basic profile details and nothing else — we can't see your Gmail, your contacts, or your files.
Your email address is held by Supabase, who run our sign-in and our database. Our own tables store your account's ID and an optional handle. They don't store your name or your email.
Your practice portfolio and trade journal
Every trade in Aureus is simulated. Your portfolio, your cash balance, your holdings, your watchlist and your trade history are practice records, and we keep them so the app can show them back to you.
If you write a note against a trade, we keep it. Notes can't be edited or deleted once written — that's deliberate, because a journal you can rewrite afterwards teaches you nothing. We keep them for as long as your account exists. Deleting your account deletes them.
We also record how many AI explanations you've used, whether you marked an explanation helpful, and — if you had a paid plan and stopped — the date your paid access ended. Nothing is deleted on a schedule.
Paying for a subscription
Payments are handled by Stripe on their own pages. Your card number never reaches Aureus and we never see it. What we store is Stripe's customer and subscription IDs, which plan you're on, and when the period ends.
If you delete your account we cancel the subscription first, then erase our records. Stripe keeps its own record of payments after that — they have to, for tax and accounting. That part isn't ours to delete.
Counting visits
We use Google Analytics to count visits and see which pages are read. It stores cookies in your browser, and Google receives the page you are on, your IP address, and basic details of your browser and device.
Before a page is counted, we remove wallet addresses, ENS names and email addresses from its web address. We also count five events: signing up, a first explanation, reaching the free limit, starting a checkout, and a purchase with its plan and price. They carry no email address, account ID, journal text or explanation text.
If you visit from the UK, the European Economic Area or Switzerland, or we can't tell where you are, we ask first, and nothing reaches Google unless you choose Allow. Elsewhere it is on unless you choose Decline. Your choice is kept in your browser, and you can change it here.
Google keeps the record of each visit for two months and then deletes it. Only totals, such as how many visits a page had, are kept longer.
How Google uses information from sites or apps that use our services
The readings archive
Aureus keeps the readings it produced about each tracked symbol, and the headlines they were drawn from. No new ones are being added. This is a record about the market, not about you: there is no user column on any of it, and it is identical for everyone. Nothing you do changes what it contains.
Getting your data, and deleting it
From your account page you can download everything in your account as one file: your profile, portfolio, trades and orders, watchlist, journal and notes, credit usage and subscription record. It is available on any plan, free included. You can also delete your account. That erases your portfolio, trade history, journal, watchlist, credit usage and subscription record, and cancels any live subscription. It can't be undone.
If something goes wrong partway, nothing is deleted — we'd rather stop than half-erase an account.
Who else receives your data
- Supabase — sign-in and database hosting
- Stripe — payments, if you subscribe
- Blockstream, Alchemy and Sourcify — a public address you paste or connect, as described above; Etherscan only as a fallback
- Vercel and Render — hosting for the site and its API
- Google — counting visits, through Google Analytics, as described above
Every outside source we use, what it provides, and what reaches it is listed on the data and attributions page.
Children
Aureus isn't for under-13s and we don't knowingly collect anything from them. If you think a child has an account here, write to us and we'll remove it.
Changes, and how to reach us
If we change this page we'll change the date at the top. This policy is governed by the laws of the State of Washington, USA.
Questions about any of this: hello@tradeaureus.com.