Privacy

what we collect

Nothing by default. No cookies, no analytics, no third-party trackers, no session recording. Your visit to vev.sh is not logged past the CDN's 24-hour edge rolling access log (operational, not shared).

what happens if you buy a founding seat

Checkout is handled by Stripe (PCI-compliant, their privacy policy at stripe.com/privacy). We receive: your email, the fact that you paid, the slot number you got, and a PGP-signable receipt. We keep these on our own server until you ask us to delete them.

We never sell, share, or rent your email. We never send you marketing. The only emails we send you are: your receipt, your license file, your onboarding rune, and (very rarely) a notice about a security issue that affects you.

presence layer

If you land on the site and there are other visitors, you may see faint lime dots moving — their cursors. Your cursor is broadcast as a pair of numbers (x, y) to a short-lived session ID that evaporates when you close the tab. No IP, no account, no persistence. Turn this off with prefers-reduced-motion: reduce.

the desktop app (vev)

Not covered here. The app does not phone home. Your SSH keys never leave your machine. Full story at /security.

your rights (GDPR / PIPEDA)

Email privacy@vev.sh to: see what we have about you, correct it, delete it, or take it with you. 30-day response SLA. No forms, no tickets, just reply to the thread.

changes

If this policy changes, we post a diff here and email every founding buyer. No surprises.