Privacy update · October 3, 2026
1. Contact and responsibility
Samyvu operates this service under the Samyvu brand. Privacy requests can be sent to Contact Support. We use information for the purposes described below, subject to applicable privacy laws. Acceptance of the terms does not authorize unrelated marketing or unlimited collection of personal information.
2. Account and security information
We store your Studio username, the IMVU username you provide, a password hash, account creation date, account status, verified or pending email, and records of age declaration and agreement with a document version. We do not store your password in readable form. We do not request an identity document or full date of birth through the age confirmation.
Login sessions use hashed tokens and expiration dates. Email verification and recovery use expiring token hashes. Automated emails contain a one-use link. The site sends account emails only when the email service is configured; it does not send marketing newsletters through these features.
3. Membership, payments and screenshots
We store Elite access periods, grants, revocations, VCOIN request details, recipient and sender names, amounts, dates, review decisions and unique references. If you submit a payment screenshot, it is stored privately and is accessible through the website only to your account and the administrator. Avoid including unrelated personal information in screenshots.
Samyvu does not receive your payment-card details or IMVU password through the VCOIN request form. External providers process their own payment and account information under their policies.
4. Favorites, votes and rewards
We record saved photographs, collections and videos, poll participation and selected options, daily claim dates, current and longest streaks, Samyvu Coins movements, redeemed rewards and their access status. These records operate the requested features and prevent duplicate claims or unauthorized access. The administrator can review records needed to manage the service.
Poll results are shown in aggregate according to the poll settings; public pages do not identify individual voters. Favorites are not published as a public profile. Coins are loyalty points and are not a financial account. Configured participation missions use existing check-in and voting records. We also store selected collection reactions and account notifications. Telegram FREE activity may be updated after a verified linked account participates in an eligible web poll; this does not mean we know whether you read Telegram messages.
5. Public supporter choices
Ranking participation is optional and off until you opt in. You can choose an alias, Anonymous or no public participation. Public rankings show position and chosen display identity, not payment screenshots, contact details or individual VCOIN amounts. Being Anonymous in the ranking does not erase the private account and verification records needed to operate the service. Support goals display aggregate verified amounts for their configured period.
6. Technical logs and optional analytics
Hosting and service providers may process IP addresses, request metadata, device/browser information and security logs to deliver and protect the service. Application rate limits use a hashed identifier derived from request and operation information. Administrative actions are recorded to support accountability. Request bodies, passwords, private storage paths and payment references are not intentionally written to application error logs.
Optional navigation statistics, when enabled, count page openings, collection and photograph openings, selected filters, button clicks and broad connection-error categories. Counts are grouped by hour, page type, collection and a coarse touch/pointer device category. They do not store usernames, email addresses, form contents, payment screenshots, IP addresses or individual browsing histories in the analytics table. Counts are events, not unique people; client events can be incomplete or inaccurate. We do not record your screen or use these totals to build advertising profiles. This optional counter honors supported Do Not Track and Global Privacy Control signals and the browser choice below. External Dub links may record their own click information when you follow them.
Administration can separately summarize operational records already required to provide the service, such as created accounts, payment requests, approved VCOIN payments, daily claims and redeemed rewards. These are confirmed service totals, not individual click-to-payment histories. When enabled, registration source and referral records may be associated with an account. Administrators may attribute a real approved VCOIN payment or an unrevoked reward redemption to a platform or campaign, with an audit record. Attribution does not prove that a particular click caused a payment. The navigation opt-out does not delete account, payment or reward records needed to fulfill your requests.
Cloudflare hosting/security metrics may operate independently of this optional counter. A separate Cloudflare Web Analytics beacon can be enabled by the operator, either through Cloudflare Pages or through the website configuration. The manual integration is off by default and respects the optional analytics choice and supported Do Not Track and Global Privacy Control signals. Cloudflare Pages settings remain under the operator’s control.
7. Cookies and local storage
Essential first-party cookies support login and the temporary age confirmation. Member sessions normally expire after seven days and administrator sessions after two hours. The age-confirmation cookie lasts up to thirty days. It records a declaration, not documentary age verification. Session cookies are secure and HttpOnly. Signing out invalidates the active login session.
Browser session storage remembers the selected home cover for the browser session, gallery filters and scroll position to make returning easier. Local storage can remember your optional analytics choice. A guest support ticket has a private access key saved in that browser’s local storage; the server stores only its hash. Anyone holding that key can read and reply to that guest ticket. Keep it private. Optional source, campaign and referral information may be remembered in session storage and associated with a completed registration when optional analytics is enabled. These navigation settings are not proof of membership, age or ownership. Clearing browser storage may reset the interface preferences or require another confirmation.
8. Service providers and external destinations
Cloudflare provides hosting, server execution, database and object storage for this service. When enabled, Resend processes recipient addresses and account-email contents to deliver verification and password-reset messages. Support requests and replies are stored in the Studio database. At the administrator’s request, a generic support-update email may be sent to a verified account email address. Cloudflare Turnstile processes security-challenge information when you submit a new support request.
Telegram and Tribute operate separate channel and payment services. IMVU operates VCOIN-related services. Dub handles the configured shortened links. MEGA and Google Drive may deliver selected videos. These services may receive connection and account information when you use them and may process data in other countries. Their own policies apply to their services; visiting this website does not automatically link your external accounts.
9. Purpose, retention and access
Information is used to operate accounts, deliver requested content, verify support, fulfill reward redemptions, secure the service and handle support or legal requests. Optional public displays depend on your choice. Where consent is required by applicable law, it must be obtained for the relevant purpose; unrelated uses require a separate basis.
Active account and entitlement records are kept while needed to provide the service. Payment, support and audit records may need to be retained to resolve disputes, prevent repeated fraud or meet applicable obligations. Unnecessary records should be deleted or anonymized when those needs end. Expired sessions and rate limits are cleaned during administration; expired verification/reset links cannot be used and expired token records are eligible for cleanup. There is no claim here that every record is deleted immediately when its link or session expires.
Access to private content and administrative functions is checked on the server. These measures reduce risk but no internet service can guarantee absolute security.
10. Your choices and privacy rights
Depending on applicable law, you may request access to your information, correction, deletion/cancellation, objection to processing, withdrawal of consent, and other rights available to you. Update your profile or supporter preference through My account, or contact Contact Support. We may need proportionate information to confirm account ownership; never email your password.
Deletion may require closing the account and ending associated access. We will explain any data that must be retained for an applicable obligation or legitimate unresolved matter. You may also contact the relevant privacy authority. In Peru, guidance is available from the Autoridad Nacional de Protección de Datos Personales.
11. Adults and updates
This service is intended for adults only. If you believe a minor has provided personal information or obtained access, contact Contact Support so it can be reviewed. Material changes to this policy will be published with an updated version and, where required, brought to your attention.