Cookie Policy
Velluto Last updated: 4 июня 2026 г.
This Cookie Policy explains how Ilia Kazakov ("Velluto", "we", "us") uses cookies and similar technologies on https://velluto.io (the "Site"). It supplements our Privacy Policy.
By using the Site you may choose which categories of cookies you accept through the cookie banner. You can change your choice at any time from the "Cookie preferences" link in the footer.
1. What is a cookie?
A "cookie" is a small text file that a website stores on your device. It is read back by your browser on subsequent visits. We also use similar technologies including local storage, session storage, IndexedDB, and pixel tags. For simplicity we refer to all of these as "cookies" in this Policy.
Cookies can be:
- First-party — set by us directly.
- Third-party — set by a partner whose code is included on the Site (e.g., the Lava.top or CryptoCloud payment page, an analytics provider).
- Session — deleted when you close your browser.
- Persistent — kept across browser sessions until they expire or you delete them.
2. Categories of cookies we use
2.1. Strictly necessary cookies (always on)
These cookies are required for the Site to function. They cannot be switched off. Examples:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
session_id |
Keeps you signed in | Session or 30 days (if "remember me") | First-party |
csrf_token |
Protects against cross-site request forgery | Session | First-party |
cf_clearance |
Cloudflare bot/DDoS protection | 30 days | Third-party (Cloudflare) |
cookie_consent |
Records your cookie preferences | 12 months | First-party |
velluto-lang |
Remembers your interface language (RU/EN) | 12 months | First-party |
velluto-currency |
Remembers your price display currency (USD/EUR/RUB) | 12 months | First-party |
velluto_session |
Login session (JWT) | 30 days | First-party |
| Lava.top / CryptoCloud payment session cookies | Process your payments securely | Session | Third-party |
Legal basis: legitimate interest under GDPR Art. 6(1)(f) / strictly necessary exception under the ePrivacy Directive Art. 5(3).
2.2. Functional / preference cookies (optional)
These cookies remember choices you make to give you a better experience. Examples:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
theme |
Remembers dark / light mode | 12 months | First-party |
lang |
Remembers your language preference | 12 months | First-party |
editor_settings |
Remembers your last-used voice, tuning sliders, etc. | 12 months | First-party |
Legal basis: your consent.
2.3. Analytics cookies (optional)
These cookies help us understand how users use the Site so we can improve it. We use a privacy-conscious analytics provider configured to truncate IP addresses and not to identify individual users.
| Provider | Purpose | Duration | Type |
|---|---|---|---|
| Plausible Analytics or PostHog (self-hosted) | Aggregated page-view and feature-usage analytics | Up to 12 months | First-party / Third-party |
| Sentry (error reporting) | Error and crash diagnostics; does not track navigation | 90 days | Third-party |
Legal basis: your consent (where required).
Note: if you switch analytics provider, update this table accordingly.
2.4. Marketing cookies (optional)
We currently do not use marketing or advertising cookies and do not participate in cross-context behavioural advertising. If this changes we will update this Policy and seek fresh consent.
3. Managing your cookie preferences
3.1. Cookie banner
On your first visit, a banner asks you to accept or reject each category of non-essential cookies. The banner has equal-prominence Accept and Reject buttons, and granular controls for each category. Strictly necessary cookies cannot be rejected because the Site will not work without them.
3.2. Changing your preferences
Click "Cookie preferences" in the footer of any page to change your choices at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
3.3. Browser settings
You can also set your browser to refuse all cookies or to alert you when a cookie is being placed. If you disable strictly necessary cookies in your browser, some parts of the Site may not work.
Most browsers also support a "Do Not Track" header. Because there is no industry-standard interpretation of this signal, we do not currently respond to "Do Not Track" headers, but we do honour any consent you give through our cookie banner.
3.4. Opt-out for analytics
Our analytics provider's cookies can be disabled in the cookie banner. If you have already accepted and wish to opt out, choose "Reject analytics" in the "Cookie preferences" panel.
4. Cookies set by third parties
When you interact with embedded third-party services (the Lava.top or CryptoCloud payment page, OAuth sign-in, embedded video) those services may set their own cookies. We do not control those cookies; refer to the relevant third party's privacy and cookie policies:
- Lava.top — https://lava.top/privacy
- CryptoCloud — https://cryptocloud.plus/privacy
- Cloudflare — https://www.cloudflare.com/cookie-policy/
- Telegram (if you sign in via Telegram) — https://telegram.org/privacy
5. Children
The Site is not directed at persons under 18. We do not knowingly set cookies for children under 18.
6. Changes
We may update this Policy from time to time. The current version is the version posted on this page. For material changes we will re-display the cookie banner.
7. Contact
For questions about cookies, write to privacy@velluto.io.