VelvetAbyss

Privacy

We hold very little: your email address if you gave us one, and the bare minimum for an online Else account.

Last updated 1 October 2026. Written to be read, not to be defensible.

This website

No analytics, no tag manager, no advertising pixel, no third-party fonts or scripts. Every file this page loads comes from this domain. Nothing about your visit is recorded by us beyond the ordinary server logs our host (Cloudflare) keeps to serve and protect the site.

Two switches in the header write to your browser's local storage when you use them: the light/dark one stores va-theme, and the animations one stores va-motion. Neither is a cookie, neither ever leaves your browser, and clearing site data removes them. Those two values are the only thing this site writes anywhere.

The waitlist form

If you submit the form, we store:

  • your email address;
  • which list you signed up from (the studio, or Else);
  • the language of the page you used;
  • the date of signup.

We use it for one purpose: to tell you when there is something to try or buy. We do not profile you, we do not enrich the address with data from anywhere else, and we never sell, rent or share the list. The lawful basis is your consent, given by submitting the form.

Every email carries a one-click unsubscribe, which deletes the address rather than flagging it. You can also ask us to delete it at any moment by writing to contact@velvetabyss.app — no reason needed, no questions asked, done within 30 days and usually the same week. If the product is not launched within 24 months, the list is deleted.

The Else application

Else has no telemetry. Not anonymised, not aggregated, not “to improve the product”. It does not send us your chats, your characters, your prompts, your settings, or the fact that you opened it.

  • Your chats, characters, memories and relationship state live in an encrypted SQLite database on your device.
  • Your provider API keys are encrypted at rest (AES-256-GCM) on your device and are never proxied through any server of ours.
  • When you send a message, the prompt goes from your device directly to the model provider you chose, under their privacy policy. With a local Ollama model, nothing leaves your device at all.
  • You can export everything you own — the whole account as JSON, or a single chat as Markdown — at any time.

The online Else account

The web version of Else keeps your data on your device, but an account lets your plan follow you from one device to the next. For that, an account service hosted by Cloudflare keeps only:

  • your email address and a password verifier (PBKDF2-SHA-256 derivation — never the password itself);
  • your sessions (secure HttpOnly cookie);
  • your current plan and the payment references (Stripe customer id or Google Play purchase token), the state of any licences;
  • a minimal administration log.

Nothing else — not your chats, not your characters, not your keys. The legal basis is the performance of the contract between us; deleting the account erases the record and its sessions, with payment references kept only for as long as accounting obligations require. The desktop application keeps a purely local account that is never transmitted to us.

If you buy a plan, the payment is processed by Stripe (web) or Google Play (Android) under their own privacy policies. We never receive your card number: only the transaction identifier, the plan, its status and the account's email address.

Processors

Cloudflare hosts this site, the waitlist and the Else account service. Stripe and Google Play process payments. They are the only processors involved. When we start sending the emails you signed up for, the sending provider will be named here before the first one goes out.

Your rights

Under the GDPR you may access, correct, delete or export the address we hold, withdraw consent at any time, and lodge a complaint with your supervisory authority (in France, the CNIL). Since we hold very little, all of it is one message away: contact@velvetabyss.app.

Who we are

VelvetAbyss is the commercial name used by a sole proprietor registered in France (SIRET 102 330 784 00012). The operator's legal name and professional address are not included in this draft, so this is not a complete legal notice for consumer sales. A professional domiciliation address can be used instead of publishing a private home address. Contact: contact@velvetabyss.app.

Changes

If this policy changes in a way that affects what we hold or why, we will say so on this page and, where the change is material, in an email to the list before it takes effect.