VEIL is built to know as little about you as possible. This page states plainly what we do and do not hold.
What the VEIL database never stores
- No names.
- No email addresses from checkout.
- No IP addresses.
- No device fingerprints.
- No analytics identifiers or advertising IDs.
What we do store
- A randomly generated sigil (your only identity here).
- The payment amount and currency, and its value in USD.
- A tier seed and the generated content of your reveal.
- Only if you voluntarily type it: a single handle (email or social) you enter in a teaser step, so we can reach you about a future feature. Leaving it blank is always an option.
Pulse data never leaves your device
Pulse records engaged time, keystroke counts, click and scroll totals, context switches, and the screen brightness you declare. All of it is written to your own browser’s local storage. It is never uploaded, never attached to your sigil, never seen by us, and never shared with anyone.
- Keystrokes are counted, not read. Which key you pressed is never inspected, stored, or transmitted — there is no keylogging here.
- Pulse cannot see other tabs, other applications, or your operating system. Browsers forbid it, and we do not work around that.
- Screen brightness has no browser API. The value used is the one you set yourself, and it is labelled as declared wherever it appears.
- You can export everything as JSON or erase it permanently, both in one click, from the Pulse page.
Cookies
We set exactly one cookie: an httpOnly session cookie that holds your sigil so you can re-open a reveal within the same browser session. It expires when your browser session ends. There are no tracking, advertising, or analytics cookies.
Payments
Payments are processed by a third-party payment provider on their own hosted checkout. Any billing details you enter there are held by the processor under their privacy policy and are never sent to or stored by VEIL. We receive only what we need to confirm a payment and its amount.
Your sigil is the key
Because we hold no personal identifiers, we cannot look you up by name or email, and we cannot recover a lost sigil. Guard it. Anyone who has your sigil can open your reveal.
Requests
Since we store no personal identifiers, there is generally nothing to export or erase beyond the record tied to a sigil. If you typed a handle and want it removed, contact us via the contact page with that sigil.