— privacy —

Privacy

What is collected, and why.

last updated · 2026-04-19

Vellum is built by one engineer. Personal data is collected only where it is necessary to operate the service, and is never sold. This page explains what is collected, why, and how to ask for it back or have it deleted.


What is collected

  • Account details. Scribe name, email address, and a salted hash of your password, when you reserve a name or subscribe.
  • Subscription records. If you subscribe via PayPal, the subscription amount, tier, and a transaction reference are stored. PayPal handles the payment data itself; Vellum never sees your card details.
  • In-game data. When the game is playable, your character state, inventory, and history are stored on Vellum's servers.
  • Pledge Token marketplace activity. Listings you create, trades you accept, and in-game gold balances are stored as in-game data. The marketplace handles only in-game gold and Pledge Tokens — never euros. No financial data ever flows from Vellum to a player.
  • Logs. Server access logs with IP addresses and timestamps, kept for a short period for security and debugging.

What is not collected

  • No analytics tracking. No Google Analytics, no Facebook Pixel, no ad networks.
  • No cross-site tracking cookies. Session cookies are used only to keep you signed in.
  • No marketing profiles are built. Email is used only for essential account communication and, if you opt in, rare milestone notes.

Third parties

  • PayPal, for processing subscriptions. PayPal's own privacy policy applies to the data it handles during checkout and recurring billing.
  • Google Fonts, for loading the three typefaces used on this site. Your browser discloses your IP address to Google in the process of fetching the font files.

Your rights

You can ask for a copy of the personal data Vellum holds about you. You can ask for it to be corrected. You can ask for it to be deleted. You can cancel a subscription at any time.

To exercise any of these rights, email privacy@vellum.game. A response will arrive within a month, often sooner.

Changes to this page

Updates will change the date at the top and be noted in the devlog if they affect what is collected.

If something is unclear, email and ask.