1. Scope and contact
This policy covers the Verellan website, accounts and workspace operated by Nathan Carlson as a sole proprietor. Contact the operator using the support request form and select Privacy or account deletion. Account and support information you enter is treated as personal information.
2. Information we collect
- Account: your email, an internal account identifier, creation and email-verification times, and a salted password hash. We do not store the readable password.
- Security: session-token hashes, session expiry and request-verification values; hashed rate-limit buckets based on connection information and email; and one-use verification/reset-token hashes and expiry times.
- Billing: Stripe customer, subscription, price, invoice, checkout and event identifiers; a temporary hosted checkout link; renewal/cancellation times; verified payment/access states; and reconciliation records. Full card numbers, CVCs and bank credentials are entered with Stripe and are not stored in the Verellan account database.
- Policy acknowledgments and recurring consent: the account, policy/offer version, exact offer, action, environment, subscription linkage and consent time. Recurring-consent evidence is kept for at least three years or one year after contract termination, whichever is longer; ongoing contracts stay retained. Subscription notices and provider acceptance/delivery evidence support reminders and cancellation. We do not record an acknowledgment for an existing account merely because a policy was published.
- Support: your supplied email, category, message, request reference and time; your account identifier if signed in; and handling status. A request does not prove ownership of an account.
- Service operation: error/status codes and security or infrastructure logs. Infrastructure error records can include connection/IP information, requested URLs or browser information. Routine application diagnostics exclude raw account fields and payment payloads.
- Analytics: controlled page/tab/feature categories, event times, environment and release, consent state, and (for signed-in first-party records only) an internal account identifier and verified/entitled status. Consented campaign labels are limited to source, medium, campaign, content and term. We do not store arbitrary full URLs, search text, article contents or form values in analytics.
- Preferences: the sidebar preference stored in your browser. We do not collect brokerage balances, positions, order history or trading credentials to personalize the workspace.
3. Uses and disclosures
We use this information to create and secure accounts, verify email, recover access, deliver the workspace, reconcile payments, maintain subscription access, record acknowledgments, answer requests, investigate errors or abuse, and meet applicable legal obligations. Authorized operators access information only as needed for these purposes. Advertising measurement and optimization and its opt-out are described below. We keep limited first-party analytics to understand acquisition, activation, retention, feature use and reliability. Google Analytics 4 is supplemental. For visitors recognized as being in the United States, limited product analytics may operate by default where permitted unless you opt out. Elsewhere, or when location cannot be determined reliably, Google stays off until you accept. Global Privacy Control blocks Google Analytics.
We may disclose relevant information to service providers carrying out these tasks, when required by law, or as reasonably necessary to protect rights and security. If the business changes hands, personal information must continue to be handled consistently with the applicable notice and law; material changes will be communicated.
4. Service providers and external sites
Stripe hosts checkout and billing management and processes the payment and fraud-prevention information you provide there. Resend delivers verification and recovery emails, including the recipient and message/link content. DigitalOcean provides the current hosted infrastructure. Restricted operator-managed systems also process market data and hold encrypted account backups. These providers may process information in countries outside your home country. Their own privacy notices describe their independent processing: Stripe, Resend and DigitalOcean.
Market providers supply market/public-source material; the workspace does not send them your Verellan account email or brokerage information to personalize scores. If you open an external source article or hosted billing page, that destination receives ordinary browser connection information and applies its own policies. External pages are not loaded as advertising embeds in the desk.
Advertising measurement and optimization
On this U.S.-focused adult service, where permitted for visitors who have not opted out or sent Global Privacy Control, we use Meta Pixel, Meta Conversions API and BeMob to measure visits from ads, checkout starts and initial subscription purchases. We retain a bounded first-party landing-page identifier, campaign labels (source, medium, campaign, content and term), and campaign/ad-set/ad/creative identifiers through signup, checkout and verified payment even if provider sharing is off. When advertising measurement is allowed, we also retain available Meta and BeMob browser/click identifiers until opt-out or expiry. Renewal invoices are not reported as new acquisition purchases.
Meta and BeMob receive event times and event identifiers, approved page/campaign information, browser/device and connection information, and the amount and currency of a verified first subscription payment. Browser requests disclose an IP address; providers may infer approximate location. Meta also receives its own browser/click identifiers and may associate events with its users. BeMob receives its generated click identifier and an opaque purchase transaction identifier. We do not send names, email addresses, phone numbers, payment-card details, raw account or Stripe identifiers, brokerage information, positions, orders, profit/loss, private market content, credentials or support messages to these advertising services. Meta's browser Pixel also receives cookie and attribution-source status flags, a coarse referrer category, browser cookie-deprecation status or label, and a list of up to five recent consented Meta click identifiers. Meta's browser Pixel also receives privacy-mode and URL-change status flags, a short hash derived from our isolated measurement-page URL, Meta dataset ID and event type, and SDK experiment-assignment and exposure status codes.
Advertising choice, storage and sharing
Advertising measurement and optimization may operate without a separate opt-in where law permits. Google Analytics remains a separate optional choice and does not turn on advertising. Use Your Privacy Choices to opt out of Meta/BeMob advertising measurement, sale/sharing or targeted advertising at any time. Global Privacy Control is honored as an opt-out and cannot be overridden while it is present. An explicit opt-out or GPC stops future Verellan-controlled Meta/BeMob transmission, clears active provider identifiers and cancels unsent provider deliveries. Data already sent to a provider cannot be recalled. We may retain bounded first-party campaign, ad and landing-page records for internal acquisition reporting and verified payment reconciliation, including after a provider opt-out; these records are not sent to advertising providers while the opt-out applies.
Meta and BeMob may receive the limited information described above when advertising measurement is allowed. We do not exchange personal information for money. Depending on the law, these disclosures may be treated as sale or sharing for cross-context behavioral or targeted advertising. Your Privacy Choices is the Do Not Sell or Share and targeted-advertising opt-out control. Provider processing and retention are described in Meta’s Privacy Policy (https://www.facebook.com/privacy/policy/) and BeMob’s End User Privacy Policy (https://bemob.com/en/end-user-privacy-policy). You may also contact us through Support about access, deletion or a privacy concern.
Verellan-controlled active attribution and detailed advertising delivery records expire after 90 days and are cleaned during subsequent processing. This limit does not govern Meta or BeMob retention of already-transmitted data; those services retain data under their own policies. Minimal invoice-derived deduplication records remain with billing records so a replay cannot report the same initial purchase again. Opt-out clears pending provider payloads but does not erase lawful first-party acquisition or billing truth. Backup copies rotate separately and restoration must respect opt-outs.
Optional Google Analytics
When allowed and configured, Google receives limited page and feature categories, approximate connection/device information and a random browser identifier. We do not send your name, email, internal account ID, Stripe IDs, account balances, broker IDs, positions, orders, profit/loss, private signals, support messages, credentials or provider payloads. GA4 does not determine access, payment, support outcomes or financial state. Production Google Analytics uses a separate production property and follows the regional default and privacy choices described above. The staging property is not used for production. Read Google’s Privacy Policy. Turning off analytics or withdrawing consent stops future transmission; it does not recall data already sent. You can make an analytics access/deletion request through Support. Google signals, enhanced measurement, ads and remarketing are disabled.
6. Retention and deletion
Session access expires after 24 hours; reset/verification links expire after 15 minutes. Expiration limits use and is not a promise that every database row is erased at that exact moment. Expired temporary records are cleaned during related account operations. Browser preferences remain until cleared. Detailed first-party analytics events and campaign touches are retained for up to 90 days and expire during subsequent analytics writes. Inactive installations may keep expired records until processing resumes. First-access dates and coarse entitlement-observation metadata follow account-record retention. Analytics cleanup never deletes account, billing or support records. Backups rotate separately. The dedicated production Google Analytics property retains event-level and user-level data for two months, with retention reset on new activity disabled; aggregated reports may follow different retention rules.
Account, support, acknowledgment, billing and diagnostic records do not currently have an automatic account-deletion or universal fixed purge schedule. Cancellation stops renewal; it does not delete your account or billing records. We retain records needed to run the account, resolve requests, maintain security and satisfy applicable recordkeeping or dispute requirements. We will review a deletion request, explain records we must retain and why, and confirm what action was taken. Backups may retain earlier records until their normal rotation; a restoration must respect previously completed deletion requests. We do not promise a deletion deadline that the current system cannot meet.
7. Your choices and requests
Use Support to request access, correction, a copy, deletion, or review of a privacy concern. Give only enough information to identify the account and request; do not send identity documents, passwords or payment-card data in the form. We may need proportionate verification before disclosing or changing account data. If you cannot access your original email, explain that and supply a reachable address; we do not transfer access solely on that statement.
Your rights and applicable deadlines depend on where you live and the laws that apply, including rights to complain to a privacy authority. We will not penalize you for exercising an applicable privacy right. See Advertising choice, storage and sharing above for the Do Not Sell or Share and targeted-advertising opt-out. Requests are handled manually and the receipt reference confirms storage, not completion.
8. Security, age and updates
We use access restrictions, hashed authentication secrets, HTTPS and restricted backups, but no online service can guarantee absolute security. Report suspected compromise using the security instructions. Verellan is intended for adults 18 or older; contact us if a child has provided information so we can investigate and address it. The date above identifies this policy version. Material changes will be explained before new practices begin.
Regional analytics choices
We estimate country locally using the request address supplied by our trusted server proxy and DB-IP Country Lite. We do not send visitor addresses to a geolocation service or retain IP addresses in our analytics ledger. Missing, invalid or stale location data disables the U.S. default. IP geolocation is approximate and may be affected by proxies or VPNs. Your saved opt-out and Global Privacy Control always take precedence. First-party service and bounded product-use records remain separate from optional Google and advertising choices.
IP Geolocation by DB-IP, licensed under CC BY 4.0; adapted to retain only U.S. country ranges. No endorsement is implied.