Privacy

What this website does with your data. It covers the Vesper Club website only, not the Vesper app.

Cookies

The site itself sets no cookies on the club page, the support page or this page and stores nothing in your browser. The site uses no analytics, no advertising and no third-party scripts, and its fonts are served from our own domain.

Signing in to the member area (/account) sets one cookie:

• __Secure-vesper_session keeps you signed in. Scripts on the page cannot read it, it travels only over HTTPS, and the browser sends it only to /account. It lasts up to 30 days and is removed when you sign out.

The staff area (/admin) is for the Vesper Club team and is guarded by Cloudflare Access, which sets its own sign-in cookie for staff. Signing in there sets two more cookies, for staff only — visitors never receive them:

• __Secure-vesper_admin — the staff session, 12 hours.
• __Secure-vesper_admin_challenge — a short note between the two sign-in steps, 10 minutes.

All of these are needed to keep a signed-in session working, so the site shows no cookie banner. If that changes, this page will say so.

What the forms send

• Join the list. Your email address, the page you joined from and any utm_campaign tags in that page’s address. The club keeps the email until it sends you one invitation and uses it for nothing else. The website keeps no copy of its own: the details go to the club’s server, which records the request and notifies the club team by email. The team may also be notified through a private Telegram chat, which then receives your email address and the time of the request.
• Support. Your email address, the subject and the message, together with the page you wrote from and the language your browser prefers (for example en). You tick a box agreeing that the team uses them to answer you. The club’s server stores the conversation together with the version of the consent text you agreed to, and notifies the club team by email. We answer by email.
• Member area. You sign in with the same email and password as in the Vesper app. The site passes them to the club’s server and keeps neither.

Abuse protection

To stop spam, the site counts requests from each network address for a short time — between 10 minutes and an hour, depending on the form. The counts live in the server’s memory and are not written to disk.

Where it runs

The website is served through Cloudflare, which handles requests, including network addresses, to deliver and protect it. The forms are passed on to the Vesper Club server. The optional Telegram notification for the Join form goes through Telegram’s Bot API.

Questions about your data

To ask what we hold about you, or to have it corrected or deleted, write to us on the support page.

Last updated 29 September 2026.