Legal

Privacy Policy

Last updated November 11, 2026

Draft, pending legal review. This page is a draft and has not yet been reviewed by a lawyer. It does not create a binding legal agreement.

Elvaris is in early development, so there is very little to say here, and we would rather say it plainly. This page explains what Elvaris stores, what it never touches and how to clear it.

Who this covers

This policy covers anyone who visits the Elvaris site or uses the Elvaris app.

Wherever this page describes how a real bank might behave, treat it as an example of tone and structure, not a promise.

What we store

When you open an account, your account details are stored on Elvaris's servers: your name, email, phone number and account ID, any identity details you submit for verification, and the play-money balances and transactions in your accounts. Only the last 4 digits of an SSN are ever kept.

When you log in or sign up, Elvaris sets a sign-in session cookie so the dashboard knows it's you. It lasts up to seven days, is refreshed while you keep using the app and ends as soon as you log out.

If you type your email into one of the sign-up pills on a marketing page, it is kept in your browser's session storage so the sign-up form can be pre-filled. Session storage is cleared when you close the tab.

The contact form checks what you type and then discards it. Messages are never sent anywhere or saved.

What we never collect

Passwords are hashed before they are saved, so they are never stored in readable form. Card details you enter when adding play money to an account are never stored.

There are no analytics tools, advertising pixels or social media trackers on this site, and nothing you do here is sold or shared.

How a real bank would differ

A real bank would need to collect identity documents, transaction history and device information to meet its legal obligations and prevent fraud. A real policy would list each category, the reason for it and how long it is kept.

We left those details out on purpose. Writing them for a bank that doesn't exist would only make this page look more official than it is.

Your choices

Log out from the dashboard to end your session and delete the sign-in cookie straight away. You can also clear this site's data from your browser settings, or browse in a private window so nothing stays in your browser after your visit.

Please don't reuse a password from another site or enter sensitive personal details anywhere on Elvaris. Made-up details work just as well.

Questions

The contact page shows how support would work at Elvaris, but because support messaging isn't live yet, messages written there are not delivered.