Privacy Policy

Using an adult store is private, and we treat it that way. We collect the minimum we need, and we treat everything about your use of Velvet Arcade — including what you browse and buy — as sensitive personal information.

1. What we collect

Data	Why	How long we keep it
Age check result (confirmed or verified, and an expiry date)	To confirm you're an adult, and to verify it where the law requires	Until it expires (up to 30 days)
Approximate location (country and state, from your IP address)	To apply regional laws	Not stored after the request
Content settings (hidden themes, discreet mode)	To filter the store the way you asked	Stored only in a cookie on your device
Order records (game, amount, date, payment method, transaction reference)	To deliver your game, handle refunds, and meet tax and accounting law	As long as tax law requires (usually 7 years)
Email address (if you give one)	Receipts, downloads, support and reports	Until you ask us to delete it, unless the law requires us to keep it
Reports you submit	To investigate and act on them	As long as needed for the investigation and legal obligations

What we don't collect

• No ID documents, selfies or dates of birth. Where verification is required, the age-assurance provider handles it and tells us only whether you're an adult. We never receive your ID or images.
• No card numbers. Our card processor collects and stores card details. We never see them.
• No advertising trackers. We don't use third-party advertising cookies or sell or share your data for advertising.

2. Who we share it with

Only the service providers we need to run the store, and only what they need:

• Age-assurance provider: performs verification under its own privacy terms and must delete your verification data once the check is done.
• Payment processors: card payments, fraud screening and chargebacks.
• Blockchain analytics provider: checks USDC payment addresses against sanctions lists. Remember that blockchain transactions are public.
• Hosting and email providers: to run the store and send receipts.

We also disclose information when the law requires it, including reports to the National Center for Missing & Exploited Children (NCMEC) and responses to valid legal process. We do not sell or share your personal information for cross-context behavioural advertising.

3. Your rights

Wherever you live in the US, you can ask us to:

• tell you what personal information we hold about you;
• give you a copy;
• correct it;
• delete it (except records the law requires us to keep, such as tax records); or
• withdraw consent for any optional processing.

Email [email protected]. We'll respond within 30 days, or sooner if your state's law requires. We won't treat you differently for exercising your rights. Residents of California, Colorado, Connecticut, Virginia, Texas and other states with consumer privacy laws have these rights by law. We give them to everyone.

4. Security

We encrypt data in transit and at rest, limit staff access to what each role needs, keep order records separate from browsing data, and use discreet billing descriptors and plain-text email subject lines.

5. Cookies

We use only cookies needed for the store to work:

• age_verified: records that you confirmed your age or passed age verification;
• content_prefs: your content settings.

There are no analytics or advertising cookies.

6. Minors

Velvet Arcade is not for anyone under 18. If we learn we've collected information from a minor, we delete it.

7. Changes and contact

We'll post changes here and update the date above. Questions: [email protected] · Velvet Arcade · [BUSINESS ADDRESS]

Draft — not yet legally reviewed. State privacy laws change frequently, so counsel must review this policy before launch.