Effective date: May 28, 2026. Plain version: your text never leaves your browser. Long version follows.
1 — who controls your data
Who controls your data.
Velocity is the data controller. Our single contact channel is vector@calyvent.com. We do not operate a phone line. We do not have a Data Protection Officer. We are a small studio.
2 — what we collect
What we collect.
Vector is 100% free. We collect: standard request logs at the Cloudflare edge (IP address, user-agent, request path, timestamp), retained by Cloudflare on its standard rolling window. We do not access these logs except to investigate abuse. We do not collect email addresses, payment information, or any account data.
3 — what we never collect
What we never collect.
We have no telemetry pipeline. We have no analytics tool. We have no error-tracking service that ships payloads. The only network calls Vector makes during conversion are loading the page itself.
4 — why we collect it
Why we collect it.
The minimum data we collect is collected to: (a) detect and prevent abuse; (b) comply with applicable law.
5 — legal bases
Legal bases (GDPR / UK GDPR).
Legitimate interests — to prevent fraud and abuse on our infrastructure.
6 — sub-processors
Sub-processors.
Cloudflare, Inc. — hosting, edge delivery, DNS, DDoS protection. United States. Each sub-processor has its own privacy notice governing its use of your data. We have no other sub-processors.
7 — international transfers
International transfers.
Velocity operates from the United States. Our sub-processors are headquartered in the United States. If you are in the EEA, the United Kingdom, or Switzerland, your data is transferred to the United States, which has not been the subject of an adequacy decision applicable to all transfers. We rely on the Standard Contractual Clauses approved by the European Commission with each sub-processor where applicable.
8 — retention
Retention.
Cloudflare edge logs — Cloudflare's standard rolling window (typically 7 days), outside our control. Email correspondence with us — kept for as long as needed to resolve the issue, then deleted within twenty-four months.
9 — your rights
Your rights.
Since we do not collect personal data beyond edge logs, there is no personal data to access, correct, or delete. California residents: you have the rights described in the CCPA/CPRA. We do not sell your data and we do not share it for cross-context behavioural advertising.
10 — children
Children.
Vector is not intended for anyone under eighteen. We do not knowingly collect data from minors.
11 — security
Security.
We use TLS for all transport. No system is perfectly secure; you accept this when you use Vector.
12 — cookies and storage
Cookies and local storage.
Vector uses your browser's local storage to remember your last-used input. We do not set advertising cookies, marketing cookies, or analytics cookies.
13 — Do Not Track
Do Not Track.
We do not track you, so DNT signals are not relevant. We honour them anyway.
14 — breach notification
Breach notification.
Because we do not store personal data or conversion data, a breach of our infrastructure cannot expose it.
15 — changes
Changes.
We may update this notice. The current version is always at this URL with an effective date at the top.
16 — contact
Contact.
All privacy correspondence: vector@calyvent.com. Subject line privacy reaches the right inbox.
last set · may twenty-eighth · two thousand twenty-six