Last updated 8 October 2026
Privacy Policy
This policy explains what information Valerian collects when you use valerian.win, the forum, support and our tools, why we need it, how long we keep it and the choices you have. We collect as little as we can, we don't sell your information, and we don't use advertising or analytics trackers. Questions: privacy@valerian.win.
What we collect
When you create an account
- Your username, which is public on the forum.
- Your email address, which is never shown publicly.
- Your password, stored only as a salted and peppered hash that can't be turned back into the password.
- Your month and year of birth, used only to apply our age rules (13 to join, a parent's approval to buy under 18).
- A record that you accepted our terms, with the date and version.
When you use the Services
- What you post: forum topics, replies, your profile bio, reports you send and support tickets.
- Your profile picture, if you upload one. It is public on the forum. Your browser crops it, makes it smaller and saves it as a new image before upload, which leaves out hidden details in the original file such as location or camera information. If you don't upload one, a picture generated from your username is shown instead.
- Your Discord account, if you link it: its ID and username, and whether we gave it the Supporter role. Discord's sign-in token is used once to confirm the account and add you to our server, then thrown away. Unlinking removes these details.
- Your licences: which tools you have, when each licence started and when it ends, and the last four characters of each key. We never store full keys, only a one-way fingerprint of them.
- Orders, once checkout opens: the product and plan, amount, date, payment reference and the email used to buy.
Technical information
- Sign-in sessions: a random session ID (stored only as a hash), your browser and device type, an approximate country, and when you signed in and were last active.
- Error and security logs: the page or request, the time, the error and a request reference. These are kept for 30 days.
- Your IP address is processed by Cloudflare, which hosts the site, to deliver pages and to block abuse with rate limits. We don't store it in our database.
- Cloudflare Turnstile checks that you are a person when you sign up or reset your password. It looks at signals from your browser and doesn't track you across other sites.
Cookies are covered in the Cookie Policy.
How we use it
- To run your account, deliver and check licences, and run the forum and support.
- To keep the Services secure: rate limits, preventing fraud and abuse, and enforcing our rules.
- To send emails you need, like confirming your address, resetting your password, ticket replies and a reminder about three days before a timed licence ends. We only send marketing if you have opted in, and you can opt out at any time.
- To meet legal obligations, such as tax and accounting records for purchases.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our contract with you, our legitimate interests in running a safe service, our legal obligations, and your consent where we ask for it.
Who we share it with
- Cloudflare, which hosts the site and database, delivers our emails and runs the bot check, acting as our service provider.
- Discord, if you link your account: we ask it to add you to the Valerian server and to give or remove the Supporter role while your licences run.
- Our payment provider, once checkout opens, which processes payments under its own privacy policy.
- Authorities, when the law requires it or to protect people's safety.
We don't sell your personal information and we don't share it for advertising.
Where it is stored
Your information is stored and processed on Cloudflare's network, which may include servers in the United States and other countries. Where the law requires it, these transfers are covered by appropriate safeguards.
How long we keep it
| Information | How long |
|---|---|
| Account details and profile picture | Until you delete your account. You can remove your picture at any time from your account page. |
| Forum posts | Until you or a moderator removes them. If you delete your account, they stay under "deleted-user" unless you choose to remove them too. |
| Support tickets | Up to 3 years after they close |
| Order and licence records | 7 years, for tax and legal reasons |
| Sign-in sessions | Until they expire, at most 30 days after you were last active |
| Error and security logs | 30 days |
| Staff action log | 1 year |
| Backups of the whole database | 12 months. Information you delete leaves the backups as they reach that age. |
When you delete your account, we erase your email, password, birth month, bio and profile picture straight away and sign you out everywhere.
Your rights and choices
- See and copy your data: use "Download your data" on your account page.
- Correct it: change your bio and picture yourself, or open a ticket to change your username or email.
- Delete it: use "Delete account" on your account page, or email privacy@valerian.win.
- Object or restrict: email us and we will respond.
Depending on where you live, including California and other US states with privacy laws, and the EEA and UK, you may have these and other rights, including the right to appeal our decision and to complain to a data protection authority. We don't sell or share personal information, we honour Global Privacy Control signals, and we won't treat you differently for using your rights. We may need to confirm your identity before acting on a request, and we reply within 30 days.
Children
You must be 13 or older to create an account. We don't knowingly collect information from children under 13. If you believe a child under 13 has given us information, email privacy@valerian.win and we will delete it.
Security
Connections to the site are encrypted, passwords and keys are stored as one-way hashes, and staff access is limited by role and logged. No system is perfectly secure, so please use a strong, unique password.
Changes to this policy
If we change this policy, we will update the date at the top. For significant changes we will tell you by email or with a notice on the site.
Contact
Privacy questions or requests: privacy@valerian.win. Everything else: support@valerian.win.