Privacy policy

This is a translation. The German Datenschutzerklärung is the legally binding version. Last updated: November 2026.

1. In short

This website sets no cookies and uses no trackers or ad networks.
For visitor statistics we use Cloudflare Web Analytics, which works without cookies and without recognising individual visitors.
Fonts are served from our own server; no Google Fonts are loaded.
We only process your email address if you sign up for the free coloring page (with double opt-in) or write to us.

2. Who is responsible

Mo Zain Elabedeen
[IMPRESSUM SERVICE ADDRESS]
Email: hello@aurorastarlight.com

3. Hosting and delivery (Cloudflare)

This website is delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technically necessary data, in particular your IP address, date and time, the page requested, the referrer URL and browser and device data. This is needed to deliver the site securely and quickly and to fend off attacks.

The legal basis is our legitimate interest in running the website securely and reliably (Art. 6(1)(f) GDPR). We have a data processing agreement with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA rely on the EU Commission's adequacy decision (Art. 45 GDPR) and additionally on standard contractual clauses.

The parts our server runs itself (the redirect to Amazon at /buy/… and the newsletter signup) also run on Cloudflare.

4. Visitor statistics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics to see how many people visit which pages. It sets no cookies, uses no local storage and builds no profiles; individual visitors are not recognised (no fingerprinting). It records things like the page visited, referrer, browser type, country and load times. We only see totals.

The legal basis is our legitimate interest in understanding and improving our website (Art. 6(1)(f) GDPR). Because nothing is stored on or read from your device, no consent under § 25 TDDDG is required.

5. Free coloring page and newsletter (Brevo)

If you sign up for the free coloring page, we process your email address to send you the coloring page and, now and then, news about Aurora's books. We send these emails with Brevo (Sendinblue SAS), 106 boulevard Haussmann, 75008 Paris, France. Brevo processes the data on our behalf under a data processing agreement, and stores it in the EU.

Double opt-in: after signing up you get an email with a confirmation link. You are only added to the list once you click it. We store the time of signup and confirmation and the IP address used, so we can prove your consent.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every email or by emailing us. After you unsubscribe we delete your address; we keep the proof of your earlier consent only as long as needed to defend against claims (Art. 6(1)(f) GDPR). We do not track whether or when you personally open our emails or click links in them: Brevo only counts opens and clicks anonymously, as totals, without linking them to any recipient. The confirmation link and links in the emails technically pass through Brevo.

6. Links to Amazon

Our books are sold on Amazon. The buy buttons go to Amazon through our address /buy/…, which picks the right Amazon store (amazon.co.uk, amazon.ca or amazon.com) from the country Cloudflare derives from your IP address. We store nothing. Once you are on Amazon, Amazon's privacy policy applies. Our website does not load any content from Amazon.

7. Fonts

The fonts "Fredoka" and "Nunito" are stored on our own server. Loading a page makes no connection to Google or any other font provider.

8. Contact by email

If you write to hello@aurorastarlight.com, we process your message and address to reply (Art. 6(1)(b) or (f) GDPR). Emails to this address are forwarded to our inbox via Cloudflare Email Routing. TODO: name the inbox provider (e.g. Google Gmail) and have it checked. We delete messages once they are dealt with and no retention duties apply.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Just email us at hello@aurorastarlight.com.

You can also complain to a data protection supervisory authority, for example the one where you live or the one responsible for us. TODO: add the responsible German state authority once the Impressum address is known.

10. No automated decisions

We make no automated decisions and create no profiles.