Cookie Policy

Vellum uses a minimal number of cookies and browser storage mechanisms. This policy explains exactly what is stored on your device, why, and how to control it. We do not use advertising cookies, behavioral tracking cookies, or sell any data derived from cookies.

1. What Are Cookies

Cookies are small text files that a website stores on your browser or device. They are widely used to make websites work, to improve the user experience, and to provide usage information to site owners. Vellum also uses browser-native storage (such as localStorage) in ways described below.

2. Cookies We Use

The following table describes the cookies and storage items placed on your device when you visit or use Vellum.

Name / Source	Type	Purpose	Duration
cf_clearance Cloudflare	Strictly necessary	Records that a visitor has passed a Cloudflare security challenge, preventing repeated challenges during the same session.	30 minutes to 24 hours
__cflb Cloudflare	Strictly necessary	Routes users to the correct server cluster in Cloudflare's load-balancing network.	Session
cf_bm Cloudflare	Strictly necessary	Used to identify and mitigate automated traffic (bots), protecting the service for human users.	30 minutes
vellum_prefs vellum.build (localStorage)	Functional	Stores your in-app preferences — such as your most recently used document category and studio profile fields — so they persist between sessions. Stored in browser localStorage, not as a cookie.	Persistent (until you clear your browser data)

Vellum does not place the following types of cookies:

• Advertising or retargeting cookies
• Social media tracking pixels
• Third-party analytics cookies (such as Google Analytics)
• Cookies from payment processors (payment is handled externally, before you reach our app)

3. Cloudflare

Vellum is hosted on Cloudflare Pages and uses Cloudflare's content delivery and security infrastructure. Cloudflare may place the cookies listed above automatically as part of its service. These cookies are necessary for the site to function securely and are not under our direct control. You can learn more about Cloudflare's data practices at cloudflare.com/privacypolicy.

4. Google Fonts

Vellum loads typefaces from Google Fonts (fonts.googleapis.com). When your browser requests a font file, Google may log the request in accordance with its privacy policy. Font requests do not typically result in persistent cookies being set. For more information, see Google Fonts Privacy FAQ.

5. How to Control Cookies

You can control or delete cookies using your browser settings. Note that blocking strictly necessary cookies may prevent the site from working correctly.

• Chrome: Settings → Privacy and security → Cookies and other site data
• Safari: Preferences → Privacy → Manage Website Data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Edge: Settings → Cookies and site permissions → Manage and delete cookies

To clear localStorage data stored by Vellum specifically, open your browser's developer tools, navigate to Application → Local Storage → vellum.build, and delete the relevant keys. This will reset your in-app preferences but will not affect your subscription or account.

6. Do Not Track

Vellum does not currently respond to Do Not Track (DNT) browser signals, as there is no established standard for DNT compliance. Because we do not engage in cross-site behavioral tracking, a DNT signal would not change what is stored on your device.

7. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for legal reasons. We will update the effective date at the top of this page when changes are made. For material changes, we will provide notice through the application or by email.

8. Contact

Questions about cookies or data stored by Vellum can be directed to:

Field Assembly LLC
63 Beach Street, Marblehead, MA 01945
legal@vellum.build
(781) 576-0505