Clear choices.
Considered care.

Staging application notice: Optional analytics and session recording are disabled here. No analytics tags are loaded. The source website notice below describes the broader customer website; provider deployment and consented analytics are not enabled by this migration.

Privacy at VolaryBox

This notice explains the information VolaryBox uses to provide the site, protect customer accounts, and—with your permission—understand how the experience can be improved.

Last updated August 27, 2026

Your analytics choice

Google Analytics and Microsoft Clarity are optional. They stay off until you choose “Allow analytics.” You can review or change that choice at any time.

Who we are

VolaryBox provides a premium product-discovery and surprise-gifting experience. This notice applies to the VolaryBox customer website at volarybox.com. It does not describe the separate internal administration system.

Information we collect

Information you provide

Account information, such as your name and email address.

Information connected with your Volary Coins balance, product discoveries, saved items, orders, and account preferences.

Messages or requests you send to VolaryBox.

Information collected to operate and secure the site

Authentication and session information needed to keep you signed in.

Basic device, browser, network, security, and request information used to deliver the site, prevent abuse, and diagnose problems.

Records needed to maintain trustworthy account, order, inventory, and Volary Coin activity.

Optional analytics information

If you allow analytics, we collect page visits, device and browser characteristics, approximate location, navigation patterns, clicks, scrolling, performance information, and similar interaction data. We do not send custom customer IDs, authentication tokens, payment details, or form-entry values through this optional integration.

Google Analytics and Microsoft Clarity

We use these services only after you allow optional analytics. Google Analytics helps us understand traffic and page use. Microsoft Clarity provides aggregated heatmaps and session recordings so we can identify confusing or broken interactions.

Clarity masks form inputs and sensitive content. VolaryBox also applies full-page masking to sign-in, registration, profile, inventory, order, and Volary Coins pages. Session recordings are not enabled on the VolaryBox admin site.

Advertising personalization and Google Signals are disabled. Page locations are sent without query strings or URL fragments.

Used for heatmaps, interaction diagnostics, and masked session recordings after consent.

Cookies and your choices

Necessary storage supports sign-in, security, site delivery, and your saved privacy choice. Optional analytics cookies and tags do not load until you allow them. If you keep optional tracking off, the customer experience remains available.

You can reopen “Privacy choices” from the lower corner of customer pages. Withdrawing consent updates both analytics providers and removes known first-party Google Analytics and Clarity cookies from the VolaryBox domain. Browser-level Do Not Track is also honored.

How we use information

Provide and secure accounts and customer features.

Maintain accurate product, order, inventory, and Volary Coin records.

Respond to questions and support requests.

Diagnose errors, prevent misuse, and improve reliability.

With permission, understand customer journeys and improve page design and usability.

Meet legal obligations and enforce applicable terms.

When information is shared

We use service providers to operate VolaryBox, including Cloudflare for network delivery and security, Vercel for hosting, Supabase for authentication and database services, Google for consented analytics, and Microsoft for consented Clarity analytics. Providers process information under their own contractual and privacy obligations.

Information may also be disclosed when reasonably necessary to comply with law, protect customers or the service, investigate misuse, or complete a legitimate business transaction with appropriate safeguards. VolaryBox does not use this analytics implementation for advertising personalization or sell personal information for money.

Retention and security

We retain information for as long as reasonably needed to provide the service, maintain required business and transaction records, resolve disputes, protect the platform, and meet legal obligations. Retention periods vary by the type of information and why it is needed.

We use administrative, technical, and organizational safeguards intended to protect information. No online service can promise absolute security.

Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, or a copy of personal information, or to object to or restrict certain processing. You may also withdraw optional analytics consent at any time without affecting necessary account and service processing.

To make a privacy request, email thomas.yu@volarybox.com. We may need to verify your identity before completing a request.

Children and changes to this notice

VolaryBox is not directed to children under 13, and we do not knowingly seek personal information from children under 13. We may update this notice as the product, providers, or legal requirements change. The updated date above will show the latest revision.