Legal
Privacy Policy
What data we collect, why we collect it, how we protect it, and your rights.
Effective Date: April 12, 2026
At Velorin, we value your privacy. This policy explains what data is collected when you use our services, how it is used, and how it is protected.
1. Data We Collect
Account Information
Email address
Username and display name
Password (stored irreversibly encrypted, never in plain text)
Profile avatar (optional)
Device and System Information
Operating system and version of the computer
Application version
Device identifier (for license binding — not a raw serial number, a cryptographic hash)
General device info (graphics card, display, and similar information required for the application to work correctly)
Usage and Error Data
Which features are used (anonymous statistics)
Error and crash reports
Security and License Verification Data
To ensure software integrity and license protection, we log the following:
License verification attempts and outcomes
Security event records when unauthorized modification or tampering attempts are detected
Connection IP address (for security and abuse detection)
Payment Data
Payment transactions are processed through Paddle.
Credit card or bank account details are not stored by Velorin.
Only subscription status and transaction reference are kept.
Chat Data
Chat messages and timestamps
Direct messages are encrypted; not kept in plaintext on the server.
2. Data We Do NOT Collect
The following data is not collected, stored, or processed:
Game account credentials (game passwords, game session tokens)
System or personal files
Keyboard or mouse input logs
Screenshots or screen recordings
Data from other applications
Location information
Browser history
3. Purposes of Data Use
Collected data is used for:
Account management and authentication
Service delivery and performance improvement
Technical support
License verification
Security measures and abuse prevention
Bug detection and fixing
Fulfillment of legal obligations
4. Data Sharing
Your data is not shared with third parties except in the following cases:
Payment provider: Paddle processes only the minimum data required for payment transactions.
Infrastructure providers: Standard hosting and CDN providers are used.
Legal obligation: Data may be shared upon court order, prosecutor's request, or written request from competent authorities.
Rights infringement: When a violation of the Terms of Service is detected, evidentiary data may be submitted to the relevant authorities.
Your data is not shared with third parties for advertising purposes and is not sold.
5. Data Security
Direct messages are end-to-end encrypted; not stored in plaintext on the server.
Passwords are stored with one-way strong hashing.
Session tokens are signed and expire after a defined period.
All communication is over secure connections.
Regular security audits are performed.
6. Cookies
The Velorin website uses the following cookies:
Essential cookies: Session management, language preference
Analytics cookies: Not used
Advertising cookies: Not used
The desktop application does not use cookies.
7. Data Retention
Account data: For the lifetime of the account
Chat messages: For the lifetime of the account
Error and crash logs: 90 days
IP and connection logs: 30 days
Security event records: 365 days (for legal obligation)
Payment transaction records: 10 years (per Türkiye accounting regulations)
Upon account deletion: Personal data is permanently deleted within 30 days; records under legal obligation are retained until the end of their respective periods.
8. Your Rights
Under KVKK and GDPR, you have the following rights:
Access: Learn what data is stored about you
Rectification: Request correction of inaccurate data
Deletion: Request deletion of your account and data
Portability: Request your data in a machine-readable format
Objection: Object to data processing activities
To exercise these rights, contact support@velorin.cc. Requests are responded to within 30 days.
9. Children's Privacy
Our services are not intended for children under the age of 13. If we discover that a user under 13 has created an account, the account and associated data will be immediately deleted.
10. International Data Transfer
Data is primarily stored on servers within the European Union. When data transfer to a different region is necessary, appropriate security measures are applied.
11. Changes
This policy may be updated from time to time.
Users will be notified of material changes via email.
12. Contact
For privacy-related questions and KVKK/GDPR rights requests: support@velorin.cc