VELVET / COMETScope of this notice
This notice describes Velvet Comet’s first-party website preferences and optional game-session analytics. Guest play does not require registration, payment details, a real name or precise location. Optional player accounts use an email address and password. Hosting providers and external websites can have their own technical processing.
Information recorded with your permission
If you choose Allow analytics, the application records a random session identifier, selected country, game, start and last-activity times, approximate active seconds, generic interaction count and whether the session ended. A private session credential protects event updates. The application does not store an IP-address or user-agent field or produce its own visitor access log.
Guest records are sessions rather than a count of unique people. If you allow analytics while signed in, new sessions are linked to your verified account. Country is selected by you, not determined from geolocation. Interactions are observed input events, not verified spins, rounds or results.
Why the information is used
Optional records help understand use of the supplied collection, improve the experience and evaluate engagement for future commercial game partnerships. Aggregate engagement results may be used for partner presentations. This notice does not describe selling named player lists, targeted advertising or guaranteed commercial performance.
Your analytics choice
Before permission, the site does not create analytics sessions. Choose No thanks to keep analytics off while retaining access to every game. Use Privacy choices in the footer to change the decision. Withdrawal stops future measurement; an active session may send a final end event, and previously recorded optional activity sessions remain until retention expiry.
Active-time measurement requires the open game, visible and focused page, and recent interaction within 60 seconds. Network loss, interruptions or browser closure can reduce the final recorded duration.
Device preferences and game storage
Local storage remembers your selected country and analytics choice under this site’s namespace. Session storage remembers adult confirmation for the browser tab. These preferences are not a payment account. Supplied games may manage their own browser storage or progress. See the device-storage page for the actual first-party key names and controls.
Retention and access
The application removes activity session records older than 90 days when its API handles requests. Administrative reports and CSV require the site’s private admin key. Guest sessions are not attached to an account later. Signed-in sessions are linked to the verified account that created them. You can delete that account and its associated activity from My account.
Hosting and external sites
Your browser and hosting infrastructure need technical network information to exchange requests. A host, CDN or reverse proxy may keep its own logs. Following an external support link takes you to another organization’s website, with its own privacy and storage policies. Those destinations are not analytics processors supplied by this application.
Practical controls
You can decline or withdraw optional analytics at any time through Privacy choices. You can remove the site’s preferences and game storage through your browser’s site-data settings. Removing those preferences does not automatically remove already recorded anonymous server sessions; the stated retention remains applicable.
Optional player accounts
You can browse and play as a guest. If you register, we store your email address, a salted password hash protected by a separate server secret, a display nickname and your account preferences in Cloudflare D1. Your email is used for sign-in, verification and password recovery, and is not shown on the public activity board. Passwords are not stored in plain text.
Verification links expire after 24 hours and password-reset links after 30 minutes. Each link can be used once. Account access uses an opaque token kept in a server-side PHP session with an HttpOnly cookie; it is not stored in browser local storage.
Linked activity and your choice
Registration does not enable activity measurement. Only if you allow analytics, a game session started while signed in is linked to that verified account. Guest sessions are not attached to an account later. You can decline measurement and still play. Interactions are approximate and sampled at most once per 1.1 seconds; they do not count verified spins, wins or outcomes.
Cloudflare D1 stores the records for the five collections in a common database. Each player can access only their own account records for the current collection. The operator’s protected network dashboard can compare aggregate activity across collections. Activity is retained for up to 90 days; accounts persist until deletion. Pending unverified registrations are removed after seven days.
Public activity board and deletion
Public participation is off by default. If enabled, only your chosen nickname, collection and current-week activity totals are public. Email, account identifiers and credentials are not included. You can opt out to hide your entries immediately. Rankings have no prizes and are not a measure of gaming skill.
From My account, change privacy settings, request a password reset, sign out or permanently delete your account with your password and confirmation. Deletion removes that account and its associated activity and access tokens. It does not delete other visitors’ guest records or other accounts.
Cloudflare and the hosting provider also process technical information under their own service policies. The account feature requires a working Cloudflare API connection and verified sending domain; an unavailable service is shown as an error, never as a completed registration or delivery.
