Privacy policy

This is a courtesy translation. The Italian version of this page is the authoritative one; in the event of any discrepancy, the Italian text prevails.

Last updated: August 2026. This notice describes how Velvet Ticino processes personal data under the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the GDPR.

1. Who processes your data

The controller is the operator of velveticino.ch. For any request concerning your data, write to us from the Contact page.

2. You can use the site without giving us anything

Browsing requires no registration and no email address. If you do not create an account, do not use the contact form and decline statistical cookies, we retain no data that identifies you.

3. What we collect, and why

Visitors

• Age confirmation. Your declaration of legal age is stored in your browser's localStorage, not on our server. We never see it and cannot link it to you.
• Browsing preferences. Grid density and your cookie choice are stored in your browser.
• Security. A technical anti-CSRF cookie (vt_csrftoken) is required for the site's forms to work.
• Statistics. Only with your consent: see the cookie policy.

If you create an account

We store your email address and a hashed version of your password. The account exists solely to save favourite profiles. Legal basis: performance of the service contract you ask us for.

If you write via the contact form

We store your name, email, optional phone number, subject and message, for as long as it takes to reply and to document how the request was handled. We also store a hash of your IP address, never the address itself: it is computed with a key that changes daily, serves only to block abuse, and is not traceable to you the following day.

If you publish a listing

To verify identity and age we process the data on the document you show us. We keep no copy of the document: we record that verification took place, the date, the type of document and who carried it out. We also process the listing data (working name, photographs, contact details, description), which is public by definition because you publish it.

4. Special categories of data

Listing data may reveal information about sexual life, which the nFADP and the GDPR classify as personal data requiring particular protection. We process it solely on the basis of the advertiser's explicit consent, given in order to publish it, and for the sole purpose of publishing the listing.

5. Who we share data with

We sell data to no one and do not pass it on for third-party advertising. We use suppliers acting as processors on our instructions: the hosting provider (servers located in Switzerland), the transactional email service and, subject to your consent, Google Analytics via Google Tag Manager. We disclose data to authorities only where the law requires it.

6. How long we keep it

• Contact-form messages: 24 months. The IP hash: 90 days.
• Accounts: for as long as the account exists. On deletion the data is erased.
• Listings: for the duration of publication. On a deletion request the public address stops answering immediately and data and files are permanently erased within 72 hours. That window exists so an advertiser can undo a deletion made in error, and it is the only moment at which that is possible.
• Age verifications: for the duration of the listing plus the period required by legal obligations, as evidence that the check was carried out.

7. Your rights

You may at any time ask us to give you access to your data, to correct it, to erase it, to provide it in a readable format (portability), and to object to a processing operation. Where you have given consent you may withdraw it at any time, without affecting what was done before. Write to us from the Contact page: we reply within 30 days.

If you consider the processing unlawful you may contact the Federal Data Protection and Information Commissioner (FDPIC), Bern.

8. Security

The site is served over HTTPS only. Passwords are stored as hashes and are not readable even by us. Access to the management panel is restricted and logged. Data is hosted on servers located in Switzerland.

9. Minors

The site is forbidden to anyone under 18. We do not knowingly collect data about minors. If we discover that we have, we erase everything immediately.

10. Changes

This notice may be updated. The version bearing the date at the top is the one in force.