Aura Privacy Policy

Last Updated: September 10, 2025

1. Read More

The Read More provides a handy entry point to our longer and more comprehensive Privacy Policy (below). It enhances rather than replaces the important notices in this Privacy Policy, which governs our collection, use, storage, and sharing of the information that we collect or receive from you.

2. Privacy Policy Overview

Unity Technologies and its subsidiaries and affiliates (collectively “Unity”) want you to be familiar with how we collect, use, and disclose User Personal Information in connection with Aura by Unity (“Aura”). The Policy refers to Unity as “we” or “us” and to the Users as “you.” When we say “User,” we mean an individual who is using Aura. When we say “Device,” we mean any device, including desktop, laptop, PC or Mac computers, smartphones, tablets, or any other device that is used to access or interact with the Service. When we say “Demand Partners,”  we mean app developers that promote their apps through Aura. When we say “Personal Information” we mean information that identifies you as an individual or relates to an identifiable individual. Personal Information does not include aggregated, de-identified, and/ or anonymized information, i.e., when the information has been transformed so that it no longer relates back to a person’s identity.

It is important that you read this Privacy Policy together with any other privacy policy or fair processing notice we may provide on specific occasions when we are collecting or processing Personal Information, so that you are fully aware of how and why we are using your Personal Information.

This Privacy Policy governs our information practices for Aura, including any Personal Information we collect in connection with Aura, such as when you call us.

3. Information We Collect

We collect the following categories of Personal Information:

A. Personal Information we receive from you:

B. Personal Information we collect through your use of Aura or from other sources:

C. Sensitive Information:

Unless we request it, we ask that you not send us, and you not disclose, any sensitive Personal Information (e.g., Social Security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background, or trade union membership) to us.

D. Aggregated, De-Identified, and/ or Anonymized Information:

We may aggregate, de-identify, and/ or anonymize Personal Information, i.e., transform the information so it no longer relates back to a person's identity so that it will no longer be considered Personal Information. We do so to generate other data for our use, which we may use and disclose for any purpose.

3. How We Use the Information we Collect or Receive

Below, you will find a table depicting how we use the information we collect or receive through Aura.

4. Sharing Information

Below, you will find an outline of scenarios in which information may be disclosed by using Aura.

5. Our Policies Concerning Children

Unless expressly provided otherwise, Aura is intended for general audiences. We do not knowingly collect Personal Information from children under 13. If any parent or legal guardian becomes aware that a child under the age to provide lawful consent to processing in their region (e.g., 13 in the U.S., 16 in the E.U.,16 in Japan) has provided us with Personal Information in contravention of our policies, they should contact us at DPO@unity3d.com.

6. Privacy Rights and Your Choices About Unity’s Collection and Use of Your Information

If you would like to request to access, correct, update, suppress, restrict, or delete your Personal Information, object to or opt out of the processing of Personal Information, withdraw your consent (which will not affect the lawfulness of processing prior to the withdrawal), or if you would like to request to receive a copy of your Personal Information for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), you may contact us in accordance with the ‘Contact Us’ section below.

In your request, please make clear what Personal Information you would like to have changed or whether you would like to have your Personal Information suppressed from our database. For your protection, we may only implement requests with respect to the Personal Information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.

Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion. Further, certain Personal Information may be exempt from requests pursuant to applicable data protection laws or other laws and regulations.

Depending on your jurisdiction, you may also lodge a complaint with a data protection authority for your country or region, or where an alleged infringement of applicable data protection law occurs. For example, a list of EEA data protection authorities is available at: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm. Information regarding the UK data protection authority is available at: https://ico.org.uk/. If you are a resident of Japan and wish to exercise any of the above rights, please email us at DPO@unity3d.com (or contact us at the address indicated in the “Contact Us” section listed below). Please see Section 16 “Additional Information for U.S. Residents” for additional information on how we handle your Personal Information and the privacy requests you may make under applicable law.

If you do have a complaint, we would appreciate the chance to deal with your concerns before approaching your supervisory body, so please contact us at dpo@unity3d.com if you wish to discuss any complaint.

7. Transfers out of Country of Collection

Unity has implemented and maintains a framework consistent with applicable law for transfers of Personal Information outside of the country of collection, including for transfers out of the UK and/or EEA.

Your Personal Information may be stored and processed in any country where we have facilities, including ironSource which is headquartered in Israel, or in which we engage service providers, such as Google Cloud Platform and Salesforce and by using Aura you understand that your Personal Information will be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Information.

Where this will involve transferring your Personal Information outside the UK and/or EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

Adequacy Decisions: Some non-EEA countries are recognized under the UK GDPR and by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries for the EEA is available here  and the list of the UK’s adequate jurisdictions is available here). For example, we may transfer to our affiliates who are located around the world, including Canada, Japan, New Zealand, Republic of Korea, Switzerland, and the United Kingdom.

Standard Contractual Clauses: For transfers of Personal Information from entities in the UK and/or EEA to third countries, which are not considered adequate under the UK GDPR and/or by the European Commission, we have put in place standard contractual clauses adopted under the UK GDPR and/or by the European Commission to protect your Personal Information. For example, we use Google Cloud Platform’s infrastructure and data centers which are located around the world, including the United States. We rely on both controller-controller and controller-processor Standard Contractual Clauses. You may obtain a copy of these measures by contacting us in accordance with the “Contacting Us” section below. “UK GDPR” has the meaning given to it in section 3(10) (as supplemented by section 205(4)) of the Data Protection Act 2018.

Japan

For transfers from entities in Japan to countries other than the EEA/UK, we have put adequate measures in place to protect your Personal Information.

The transferees are obligated to comply with equivalent or comparable rules to those under the Act on the Protection of Personal Information of Japan (APPI) on a continuous basis, and we periodically confirm their compliance. We also periodically confirm any changes to the data privacy regulations of other countries that may affect the compliance measures taken by our overseas affiliates and third-party service providers and take measures such as requesting that they take corrective measures or suspending the provision of Personal Information if any issues arise in the implementation of such compliance measures. We will provide you with further information on the measures we take in this regard upon your request.

8. Retention

We retain Personal Information for as long as is necessary or as permitted in light of the purpose(s) for which it was obtained and consistent with applicable law, for example, for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. The criteria to determine our retention periods include:

1. The length of time we have an ongoing relationship with you and provide Aura to you (for example, for as long as you have an account with us or keep using Aura);
2. Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
3. Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

Where a legal obligation arises or retention is advisable in light of our legal position, in some circumstances, we will retain certain Personal Information, even after your account has been deleted and/or we no longer provide Aura to you; for example:

• To cooperate with law enforcement or public, regulatory and government authorities: If we receive a preservation order or search warrant, related to your Aura account, we will preserve Personal Information subject to such order or warrant after you delete your Aura account.
• To comply with legal provisions on tax and accounting: We may retain your Personal Information, such as Account Information, after you delete your Aura account, as required by tax law and to comply with bookkeeping requirements. Please note the length of time may vary by country.
• For fraud and security purposes: We may retain your Personal Information for fraud or security purposes. In the event you have acted fraudulently through the use of Aura (e.g., by refusing monies properly owed for Aura), we may retain Account Information and IP address.
• To pursue or defend a legal action: We may retain relevant Personal Information in the event of a legal claim or complaint, including regulatory investigations or legal proceedings about a claim related to your Personal Information, or if we reasonably believe there is a prospect of litigation (whether in respect of our relationship with you or otherwise) after the dispute has been settled or decided by a court or tribunal from which there is no further right of appeal. The criteria for determining the length of time we will retain this information include:

• Whether there is a legal obligation to which we are subject (for example, if the settlement or decision requires us to keep the records for a certain period of time before we can delete them); or

• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

9. Security

We employ a variety of measures to safeguard the collection, transmission, and storage of the information we collect. These measures vary based on the sensitivity of the information that we collect, process, and store, and the current state of technology. Please note that no system can be guaranteed to be 100% secure. Therefore, while we strive to employ reasonable protections for your information that are appropriate to its sensitivity, we cannot guarantee or warrant the security of the information you share with us, and we cannot be responsible for the theft, destruction, loss or inadvertent disclosure of your information. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. We have put in place procedures to deal with any suspected Personal Information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contact Us” section below

10. Cookie & Advertising Policy

We may collect Personal Information using cookies and similar technologies. For more information on how Unity uses cookies, the types of cookies and other technologies used, and your privacy choices, please see our Cookie & Advertising Policy.   

11. Sites and Services Operated by Others

Aura may contain links to other sites, applications, and services. Because Unity does not operate those other sites, applications, and services, we cannot take responsibility for the privacy practices of the entities that operate them. We recommend that you consistently check privacy policies to understand an operator’s practices. As a reminder, this Privacy Policy describes Unity’s practices in connection with Aura.

This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any website or service to which Aura links. The inclusion of a link on Aura does not imply endorsement of the linked site or service by us or by our affiliates.

Aura may provide functionality allowing you to make payments to us using third-party payment services with which you have created your own account. When you use such a service to make a payment to us, your Personal Information will be collected by such a third party and not by us and will be subject to the third party’s privacy policy, rather than this Privacy Policy. We have no control over, and are not responsible for, this third party’s collection, use, and disclosure of your Personal Information.

In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, RIM, other Demand Partners, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including with respect to any Personal Information you disclose to other organizations through or in connection with the Apps or our social media pages.

12. Contact Us

Unity Technologies SF, located at 116 New Montgomery St., San Francisco, CA 94104., USA, is the organization responsible for collection, use, and disclosure of your Personal Information under this Privacy Policy.

Our European contact is Unity Technologies ApS, located at Niels Hemmingsens Gade 24, 1153 Copenhagen, Denmark.  

Our Japanese contact is Unity Technologies, GINZA SIX 8F, 6-10-1 Ginza, Chuo-ku, Tokyo Japan 104-0061.

If you have any questions about this Privacy Policy, please contact us at DPO@unity3d.com.

Because email communications are not always secure, please do not include credit card or other sensitive information in your emails to us.

13. Changes to this Privacy Policy

The “LAST UPDATED” legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on our Privacy Policy Hub.

We reserve the right to change our practices and this Policy at any time. We may also send an email or provide notice within Aura when this Policy changes. We encourage you to check our Privacy Policy Hub regularly so that you know what our current practices are.

14. Additional information for those located in the European Economic Area

We process and disclose your Personal Information as necessary or appropriate as set out in further detail here.

15. Additional Information for U.S. Residents

Collection and Disclosure of Personal Information

The following chart details which categories of Personal Information we collect and process, as well as which categories of Personal Information we disclose to third parties for our operational business purposes, including within the 12 months preceding the date this Privacy Policy was last updated. You may view our California Consumer Privacy Act (CCPA) Transparency Report at https://unity.com/legal/privacy-report for details on our responses to requests to access, delete or opt out under CCPA.

Individual Requests

You may, subject to applicable law, make the following requests:

1. To know whether we process your Personal Information, and to access such Personal Information.

If you are a California consumer, you may also request that we disclose to you the following information:

1. The categories of Personal Information we collected about you and the categories of sources from which we collected such Personal Information;
2. The business or commercial purpose for collecting, “sharing,” or selling Personal Information about you;
3. The categories of Personal Information about you that we sold or “shared” and the categories of third parties to whom we sold or “shared” such Personal Information; and
4. The categories of Personal Information about you that we otherwise disclosed, and the categories of third parties to whom we disclosed such Personal Information.

If you are an Oregon or Minnesota consumer, you may also request that we disclose to you the following information:

1. The categories of Personal Information we process about you; and
2. The third parties to whom we have disclosed your Personal Information.

If you are a Delaware or Maryland consumer, you may also request that we disclose to you the categories of third parties to whom we disclosed your Personal Information.

2. To correct inaccuracies in your Personal Information.
3. To have your Personal Information deleted.
4. To receive the specific pieces of your Personal Information, including a copy of your Personal Information in a portable format.
5. To opt out of the “sale” of your Personal Information.
6. To opt out of targeted advertising, including the “sharing” of your Personal Information for cross-context behavioral advertising.

We will not unlawfully discriminate against you for exercising your rights under applicable privacy law. To make a privacy request, please contact us at DPO@unity3d.com or Unity Technologies, 116 New Montgomery St., San Francisco, CA 94104, USA. We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the Personal Information subject to the request. We may need to request additional Personal Information from you, such as email address/ username/ country associated with the account where applicable, in order to verify your identity and protect against fraudulent requests. If you make a request to delete, we may ask you to confirm your request before we delete your Personal Information.

To request to opt out of any future sale of your Personal Information and/or targeted advertising, including the “sharing” of your Personal Information for cross-context behavioral advertising, please contact DPO@unity3d.com.

We do knowingly not “sell” or “share” the Personal Information of Users who are minors under 16 years of age.

We also process opt-out preference signals, such as the Global Privacy Control.  These signals set your opt-out preferences only for the particular browser or device you are using and any consumer profile that we associate with that browser or device unless you are logged into your Company account, in which case we will honor the signal with respect to that browser or device and your account, including your offline consumer profile associated with that account.  If you wish to set your opt-out preferences for offline uses of your Personal Information, please contact DPO@unity3d.com.  For information about how to use the Global Privacy Control, please visit https://globalprivacycontrol.org/.

Appeal Process 

If you are a consumer in a state whose laws provide for a right of appeal and If we refuse to act on your request, you may appeal this refusal within a reasonable period after you have received notice of the refusal.  You may file an appeal by contacting us via DPO@unity3d.com.  

Authorized Agents

If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted in the section entitled “Individual Requests.” We will process the agent’s request consistent with applicable law. As part of our verification process, we may request that the agent provide, as applicable, proof concerning their status as an authorized agent.  In addition, we may require that you verify your identity as described in the section entitled “Individual Requests” or confirm that you provided the agent permission to submit the request.

De-Identified Information

Where we maintain or use de-identified information, we will continue to maintain and use the de-identified information only in a de-identified fashion and will not attempt to re-identify the information.

Providing Personal Information to third parties for direct marketing purposes: California residents have the right to request the identity of any third parties to whom the resident’s Personal Information was provided, if such provision was to enable the third party’s direct marketing efforts. If you are a California resident and wish to make such a request, please submit your request to DPO@unity3d.com. Alternatively, you may opt-out of having your Personal Information shared with third parties for their direct marketing purposes, by emailing us at DPO@unity3d.com.

How we respond to “Do Not Track” signals: We are committed to providing you with meaningful choices about the information collected on Aura. Our cookie management tool on our website recognizes browser-initiated Do Not Track signals. To learn more about Do Not Track signals, you can visit allaboutdnt.com.