A3RN Account Privacy Policy

Effective Date: October 31, 2026

A3RN LLC ("A3RN," "we," "us," or "our") operates the A3RN account: the sign-in at auth.a3rn.com that you use to access A3RN products. This policy covers the account itself — the profile you register with, the credentials you sign in with, and the records the sign-in service keeps. Each A3RN product has its own privacy policy for the data that product holds; see A3RN Products below. This policy applies to users within the United States.

1. Data the A3RN Account Holds

Profile

Email address, and whether you have verified it
First name, last name, and display name
Account identifier, creation date, and account status

Credentials

Passkeys you register: the public key, a name for the passkey, and when it was registered and last used. The private key never leaves your device or passkey provider
Your password, if you set one, stored only as a salted hash that cannot be turned back into the password

Sign-In Records

Sign-in sessions: when they started, which A3RN product they were for, and the browser or app (user agent) used
IP addresses of requests to the sign-in service

2. How We Use It

To sign you in to A3RN products and keep you signed in
To tell an A3RN product who you are when you sign in to it: the product receives your account identifier, email address, and name
To send account emails, such as verification and password-reset codes and notices that a passkey was added
To protect the sign-in service and your account from abuse, fraud, and automated sign-ups

We do not use your A3RN account data for advertising, and we do not sell or share it with third parties for their marketing purposes.

3. Service Providers

The sign-in service runs on servers operated by A3RN. Two service providers process account data on our behalf, only to provide the service:

Email delivery: account emails are sent through an email delivery provider, which receives your email address and the content of the message
Network protection: requests to auth.a3rn.com pass through Cloudflare, which processes IP addresses and request details to deliver traffic and to block abuse. When you register, your IP address and the domain of your email address are checked to prevent automated and disposable-address sign-ups

4. Signing In to A3RN Products

One A3RN account signs you in to every A3RN product. A product receives your profile details only when you sign in to it, and from then on holds its own copy under its own privacy policy. Signing in to one product does not share that product's data with any other product.

5. Deleting Your Data

You have two choices:

Delete your data in one product: each A3RN product lets you delete the data it holds for you from that product's settings, while keeping your A3RN account so you can go on using other products
Delete your A3RN account: at auth.a3rn.com/account, sign in and confirm. Your account is deleted, all of your sign-in sessions end, and you can no longer sign in to any A3RN product. Every A3RN product is notified and deletes the data it holds for you. This cannot be undone

The sign-in service keeps an internal history of changes to accounts. After your account is deleted, that history still contains the email address and name you registered with. It is not used to sign you in, to contact you, or for any other purpose, and it is not shared with A3RN products.

6. Data Retention

Profile and credentials: kept while your account exists, and deleted when you delete your account, except as described in Section 5
Sign-in sessions: kept until they expire or you sign out
Security records (sign-in history and IP addresses): kept in the sign-in service's internal history for security, fraud prevention, and abuse detection

Data may be retained longer than indicated if required by law or necessary to resolve disputes.

7. Security

Transport: all communication with the sign-in service uses encrypted transport (HTTPS)
Credentials: passkeys keep their private key on your device, so we never hold it; passwords are stored only as salted hashes
Access control: the account-management interfaces of the sign-in service are not reachable from the internet

No system is completely secure. In the event of a security breach that affects your personal data, A3RN's notification obligations are limited to those imposed by applicable U.S. state law.

8. Age Restriction

The A3RN account is intended only for users aged 16 and older who are residents of the United States. We do not knowingly collect personal information from anyone under 16. If we learn that a user under 16 has created an account, we may delete that account without notice.

9. A3RN Products

Each product's privacy policy covers the data that product holds:

Cynosure Privacy Policy

10. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will post the updated policy on this page and change its effective date. Your continued use of your A3RN account after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this policy or your A3RN account, email us at , or see A3RN Support.