Scope and responsibility
This policy applies to Velvkey's public reviews, rankings, comparisons, search, policy pages, and outbound-link service. It does not govern a third-party destination reached from Velvkey.
Where applicable privacy law uses terms such as "controller" or "business," Velvkey LLC acts in that role for the processing it determines and is responsible for the practices described here.
Information Velvkey handles
Velvkey reviews and policy pages are available without an account. Velvkey does not currently provide public comments, messaging, uploads, purchases, or subscription accounts.
- Requests and service security. Hosting, network, database, and security providers may process ordinary request information such as IP address, browser or device details, timestamps, requested URLs, and error or abuse signals.
- Search. Velvkey processes the terms you enter to return results. A full-page search places the query in the page URL and browser history. Velvkey does not maintain a separate user search-history profile.
- Session interface settings. Your browser's session storage may hold the side-navigation width and which navigation groups are expanded. These settings expire when the tab or browser session ends.
- Communications. If you email Velvkey, the message, sender address, attachments, and related response history are processed to address the request and protect the service.
Outbound-link receipts
When you use certain outbound links, Velvkey may create a limited routing record. It may include a random identifier, the profile involved, whether the route succeeded, where the link appeared, the destination domain, referral program and campaign identifiers when present, the time of the event, and confirmation that referral eligibility was kept separate from the editorial score.
The receipt does not contain the visitor's name, email address, account identifier, raw IP address, user-agent string, referrer, full destination URL, search query, or selected browse context. Velvkey uses these records to operate and monitor outbound links, measure referral performance, investigate abuse, and confirm that commercial eligibility remains separate from editorial scoring.
Purposes and legal bases
Velvkey uses information to deliver search and public pages, remember local interface settings, operate and audit outbound routing, respond to communications, prevent abuse, maintain security, and comply with applicable law.
Where a legal basis is required, Velvkey relies on its legitimate interests in operating, securing, measuring, and improving the service; steps taken at your request when responding to you; compliance with legal obligations; and consent where applicable law requires it for a particular technology or use.
Cookies, session storage, and analytics
Velvkey does not currently use advertising cookies, behavioral analytics, session replay, or cross-site tracking on its public pages. The application uses browser session storage for the navigation settings described above and a first-party cookie to remember your selected browse mode. The browse-mode value is not used for advertising or cross-site tracking.
Velvkey does not currently sell personal information or share it for cross-context behavioral advertising. If these practices or technologies change, Velvkey will update this policy and provide any legally required notice or choice before the change applies.
When information is shared
Velvkey uses service providers for infrastructure, hosting, databases, security, and business email. Those providers process information for their assigned services under their own contracts and security controls.
Velvkey may also disclose information when reasonably necessary to comply with law, respond to lawful process, protect rights and safety, investigate abuse, or complete a corporate transaction subject to appropriate confidentiality and notice requirements.
Velvkey does not authorize service providers to use information received from Velvkey for their own cross-context behavioral advertising. Providers may independently receive ordinary web request information when you visit their infrastructure, subject to the contracts and configurations applicable to the service they perform.
Retention
- Outbound-link receipts are deleted automatically 31 days after the event.
- Session interface settings remain in the current browser tab until its page session ends or you clear Velvkey's site data.
- The browse-mode cookie remains for up to one year or until you replace it by choosing another mode or clear Velvkey's site data.
- Velvkey does not maintain a separate application database of public search history. Queries may remain in browser history and in routine infrastructure or security logs governed by the relevant provider's settings.
- Communications are retained for as long as reasonably necessary to resolve the request, maintain business records, protect the service, and meet legal obligations.
Third-party destinations
Some outbound links include referral parameters. When you follow one, the independently operated destination receives information ordinarily included in a web request and applies its own privacy policy. Velvkey does not control that destination's data practices, accounts, or billing. See the Affiliate Disclosure.
International processing
Velvkey LLC operates from the United States and makes public pages available in multiple countries. Velvkey and its service providers may process information in the United States and other countries, where privacy laws may differ from those in your location. If you are outside the United States, information associated with your use of Velvkey may be transferred to and processed in another country. Contact legal@velvkey.com for information about a transfer relevant to your request.
Your privacy rights and choices
Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing; withdraw consent where processing is based on consent; appeal certain decisions; or complain to a privacy regulator. These rights may be subject to verification, legal exceptions, and limits under applicable law.
You may clear local settings through your browser and decline to follow third-party links. To submit a privacy request, email legal@velvkey.com with the request, your location, relevant Velvkey URLs, and enough information to locate the affected record. Do not send passwords, payment credentials, government identification, or unnecessary sensitive information.
U.S. state privacy notices
If a U.S. state privacy law applies to Velvkey's processing of your information, the categories of information collected, sources, business purposes, and recipient categories are described in the sections above. Velvkey does not currently sell personal information or share it for cross-context behavioral advertising and does not use sensitive personal information to infer characteristics about public visitors.
Subject to applicable law, you may request access, correction, or deletion; obtain a portable copy; opt out of a covered sale, sharing, targeted-advertising use, or qualifying profiling; use an authorized agent; or appeal a denied request. Velvkey will not discriminate against you for exercising an applicable privacy right. Velvkey may verify your request, the affected record, your location, and an agent's authority before acting.
Browser privacy signals
There is no uniform standard for Do Not Track signals, and Velvkey does not currently change its behavior in response to them. Velvkey does not currently permit third parties to collect personal information through the public application over time and across different websites for behavioral advertising. Because Velvkey does not currently sell personal information or share it for cross-context behavioral advertising, there is no such activity for a Global Privacy Control signal to opt out of. Velvkey will implement legally required signal handling if its practices change.
Age and children's privacy
Velvkey covers adult-market services and is intended only for people who are at least 18 and legally permitted to view this subject matter where they live. Velvkey does not knowingly collect personal information from children. If you believe a child has provided personal information to Velvkey, contact legal@velvkey.com.
Security
Velvkey uses administrative and technical measures designed to protect information against unauthorized access, alteration, disclosure, and loss. Access to non-public systems is restricted by role and protected authentication. No internet service or storage system can be guaranteed completely secure.
Velvkey investigates suspected security incidents and will provide notice to affected people or regulators when and as required by applicable law. Report a suspected incident to legal@velvkey.com without sending passwords, access codes, or other secrets.
Changes and contact
Velvkey may update this policy as the service, its providers, or legal requirements change. The release information above identifies the current version. Material changes will receive additional notice when required by law.
Privacy questions and requests may be sent to legal@velvkey.com. Velvkey LLC receives and handles privacy requests through that address.