Privacy Policy

In force from 22 August 2026

This page describes what data vvarb.com collects, why, and who it is shared with. The data controller is the owner and operator of vvarb.com, a private individual, reachable through the contact page.

1. What we collect

• Email address - needed to sign in, to confirm the account, and for messages about payment.
• Password - stored only as a cryptographic hash. We do not know your password and cannot show it to you.
• IP address and browser type - recorded with the sign-in session, so that you can see your active sessions and we can stop password guessing.
• Language, theme and screener settings - kept in your browser and on the server so you need not set them again.
• Payments - amount, plan, status and transaction id. We never see card details at all: payment is in cryptocurrency only.
• Affiliate data - your code, the sign-ups it brought, the commission accrued, and the wallet address you gave for payout.
• Where you arrived from - the tag on the link you followed, or the address of the site that linked here. Kept in your browser and written once at sign-up, so that we know which of our own material people read. It is not tracking: no identifier that works beyond this site is created.

The site carries no analytics, no counters and no advertising pixels of any kind. We do not follow you beyond this site and we sell data to nobody.

2. Why

Only to run the service: to let you into your account, to credit a payment, to calculate affiliate commission, to answer a message, and to protect accounts from being broken into. We do not use your data for profiling and take no automated decisions about you on the basis of it.

3. Who it is shared with

• Plisio - the payment service. Receives the amount and the order id in order to process the payment.
• Brevo - the mail service. Receives your address in order to deliver a confirmation code or a payment receipt.
• Google reCAPTCHA - the human check on sign-up and password recovery. Google receives your IP address and technical browser signals.
• Hosting - the server is located in the Netherlands; the provider has technical access to the infrastructure.

Data is shared with nobody else. The exception is a justified lawful request from a competent authority.

4. Cookies

The site sets two cookies, both its own. vv_sid is the session identifier - without it you cannot stay signed in. vv_src records where you arrived from, lives 90 days and is sent nowhere. Both are needed to run the service and neither follows you across other sites, which is why there is no consent banner on this site: not because we forgot one, but because there is nothing to ask consent for.

Language, theme and table settings are kept in your browser’s local storage. Those values are sent nowhere and disappear when you clear the site’s data.

5. How long we keep it

Account data for as long as the account exists. Payment records for as long as accounting for those payments requires. Sessions are deleted automatically when they expire. A deleted account is removed together with its sessions and settings.

6. Your rights

You may obtain a copy of your data, correct it, delete your account, or withdraw consent to processing. The password is changed in your account area. For anything else, write through the contact page, giving the address the account is registered to. To be sure the request is really yours, we may ask you to confirm it from inside the account.

Deleting an account is irreversible: settings, payment history and affiliate statistics go with it.

7. Security

The site runs over HTTPS only. Passwords are stored as salted hashes. Server access is by key, with no passwords. We cannot promise absolute security - nobody can - but we collect little precisely because data never collected cannot be lost.

8. Changes

A new version takes effect when published on this page. The date is shown at the top.