Legal

Privacy Policy

Last updated 7 October 2026.

The short version

We collect the minimum needed to sell you VELOUR and let you in. Your work inside the Studio never leaves your browser. We do not sell or share your data for marketing.

What we collect and why

• Email address and payment confirmation. When you buy, Stripe sends us your email address and a record that the payment succeeded (not your card details; Stripe keeps those). We store the email and the Stripe session reference so we can recognise you as a buyer and send you sign-in links.
• Sign-in cookie. After you sign in we set one cookie in your browser so you stay signed in for 90 days. It contains a signed token, not your password (there is no password).
• Sign-in emails. We send sign-in links through Resend. Resend processes your email address to deliver them.
• Your Studio work. Everything you type into the Studio is saved only in your browser's local storage on your device. We do not receive, store or see it.
• Basic server logs. Our hosting provider (Vercel) keeps standard request logs (IP address, time, page) for security and reliability, for a limited period.

What we do not do

• We do not sell or rent your information.
• We do not use advertising trackers or analytics cookies on the Studio.
• We do not ask for, and you should not enter, patient data, employer documents or other people's personal information.

Who we share data with

Only the service providers needed to run VELOUR: Stripe (payments), Vercel (hosting), Upstash (secure storage of buyer email records) and Resend (sign-in emails). Each processes data on our instructions.

How long we keep it

Buyer records are kept for as long as VELOUR is available so your access keeps working, and for as long as the law requires for payment records. You can ask us to delete your record at any time; this ends your access.

Your rights

You can ask what we hold about you, ask us to correct or delete it, or object to how we use it, by emailing studio@velourbycharlen.com. If you are in the EU, UK, Canada or a US state with privacy rights, you have the rights those laws provide.

Children

VELOUR is for adults. We do not knowingly collect data from anyone under 18.

Changes

We will update this page if our practices change and update the date at the top.

Contact

Squeeze Bounce Consulting Inc., studio@velourbycharlen.com