Privacy Policy

Last updated: Owner to fill: date

This page explains what The Velvet Cafe collects, why, who it is shared with, and what you can do about it. We do not sell your data or show ads.

What we collect

From Discord when you sign in: your Discord user ID, username and avatar. We only ask Discord for basic identity. We do not get your email, messages or server list.
From Roblox verification: your Roblox user ID and username, linked to your Discord account by our Discord bot.
What you put on your profile: website username, gender, age range, tag, mood, bio, interests, links, music link, custom style code, images, blinkies and top friends.
What you do on the site: guestbook and lounge messages, likes, which profiles you view (once per day per profile), queue entries, invitations, matches, coin balance and coin history, and badges.
Safety records: reports you make or that are made about you, moderator decisions and notes, warnings and bans.
Images you upload: PNG files of up to 2 MB, stored with your Discord ID.
Technical data: your IP address, used to limit sign-in attempts and for bot checks, plus the security logs our host keeps.

Why we use it

to sign you in and keep you signed in;
to show your profile and community features to other members;
to run the queue, pair players and send matches to our Roblox game;
to keep the community safe: handling reports, enforcing the rules and stopping abuse;
to keep the site working and secure.

Who can see it

Other members see your profile, username, badges, likes, guestbook and lounge posts.
Moderators see reports, moderation history and the account details needed to review them.
Our Discord bots share moderation with the site. For example, a website ban also applies in our Discord server.
Our Roblox game receives the Roblox IDs of the two players in a match.
Service providers store and deliver the site for us: Supabase (database and file storage) and Cloudflare (hosting, security and bot checks). Discord and Roblox handle sign-in and account checks.

We share data with others only if the law requires it, or to protect someone's safety.

How long we keep it

Queue entries expire after about 10 minutes without activity.
Sign-in sessions last up to 30 days (moderator sessions: 12 hours).
Profile and activity data stays while your account exists.
Safety records (reports, warnings, bans) may be kept after an account is deleted, so banned users cannot simply come back. Owner to fill: how long

Your choices

Edit or clear your profile at any time, or hide yourself from the invite queue in settings.
Ask staff for a copy of your data, or for your account and content to be deleted.
Depending on where you live (for example the EU, UK or California), you may have further rights, such as correcting your data or objecting to how it is used. Contact us to use them.

Age

The site is for adults (18+). We do not knowingly collect data from anyone younger, and we delete it if we find it.

Security

Your data is only accessed from our server, never directly from your browser. Sessions are signed and stored in secure cookies. No system is perfectly safe, so keep your Discord account secure too.

Changes and contact

We will update this page when what we collect changes; the date at the top shows the latest version. Questions or requests: Owner to fill: contact email, or staff in the Discord server. See also the cookie disclosure.

Back