Who we are
VelaStream is a media player for Windows, published by ERTK Labs. You bring your own playlists, guides and streams. We do not provide channels or content.
Privacy questions go to [email protected].
The short version
- Your playlist logins, settings, favorites, watch history, recordings and reminders stay on your device.
- We run no accounts, no analytics and no telemetry. The app does not connect to any server that we run.
- The app contacts only the services you set up, plus the third-party services listed below.
- Purchases are handled by Microsoft Store. We never see your payment details.
What stays on your device
VelaStream keeps the following on your PC, in your Windows user profile:
- Playlists and logins. Server addresses, usernames, passwords and playlist links. Passwords are encrypted with Windows DPAPI, so only your Windows account on this PC can read them.
- Settings and state. Your preferences, favorites, watch history, reminders and recording schedule.
- Recordings. Programs you record are saved as files in the recordings folder you choose.
- Artwork cache. Posters and other images the app has loaded, kept so they open faster.
- License status. A local copy of your Pro license status, so the app can work offline. It is protected with DPAPI too.
- Logs. A rolling app log kept only on this PC. The app never sends it anywhere by itself. Credentials and tokens are masked in it.
- Trailer player data. The embedded YouTube player uses a small browser profile (WebView2) on this PC. See the connections table below.
Connections the app makes
The app contacts a service only when you use the feature that needs it. These are all the destinations it can reach.
| Service | Why | What is sent |
|---|---|---|
| Your IPTV provider | Your provider's server, portal or M3U address, and any guide (XMLTV) address you add. Used for live TV, movies, series, catch-up and the program guide. | Your login details and the requests needed to play content. We never receive them. |
| ESPN (site.api.espn.com) | Sports scores and schedules. | Requests for sports data. No account or playlist details. |
| SofaScore (www.sofascore.com) | Volleyball scores and schedules. | Requests for schedules. No account or playlist details. |
| TMDB image servers (image.tmdb.org and related hosts) | Posters and other artwork for movies and series. | Requests for image files. As with any website, the server sees your IP address. |
| Other artwork hosts, such as BunnyCDN | Artwork that some catalogs link to. | Requests for image files, as above. |
| flagcdn.com | Country flags on the Sports page. | A request for a small flag image. |
| YouTube (youtube-nocookie.com and youtube.com) | Trailers, played in an embedded YouTube player. | The player and video requests. YouTube and Google may set cookies in this embedded player under their own policies. Those cookies are kept in the app's browser profile on this PC. |
| Google Public DNS (8.8.8.8) and Cloudflare DNS (1.1.1.1) | Name lookups over HTTPS for artwork hosts, when the DNS-over-HTTPS fallback is on. TMDB and BunnyCDN use it first; other image hosts only when your system DNS fails. | The image host name being looked up. You can switch this off in Settings. |
| Microsoft Store and Microsoft account pages | Buying, restoring and managing Pro. | Handled by Microsoft. See Purchases below. |
This product uses the TMDB API but is not endorsed or certified by TMDB.
You can switch off the DNS-over-HTTPS image fallback in Settings. When it is off, only your system DNS is used, so some artwork may load slowly or not at all.
This website
This website sets no cookies and runs no analytics or trackers. It loads its typeface from Google Fonts. Loading the font sends your IP address and browser details to Google, as with any page that uses Google Fonts.
Purchases and subscriptions
VelaStream Pro is sold through Microsoft Store, as a yearly subscription or a one-time lifetime purchase. Microsoft Store processes your payment and account details under Microsoft's own privacy statement. We never receive payment details, and the app never asks for them.
To check your license, the app reads the purchase status that Microsoft Store provides on this PC. It keeps a local copy so Pro can keep working offline for a limited grace period.
Restoring purchases and managing a subscription use Settings and Microsoft's own pages. Those pages open in your browser or in Microsoft Store.
Children and parental controls
VelaStream is not directed at children, and we do not knowingly collect information from anyone, children included.
Parental controls hide chosen groups behind a 4-digit PIN. They are a household convenience, not a security measure. The PIN is stored on this PC as a salted hash, and anyone with access to the settings files can work around it. The forgot-PIN option clears the PIN if you type RESET. Do not rely on it to stop a determined user.
Security
Playlist passwords and the license cache are protected with Windows DPAPI for your Windows account. The app's log masks credentials and tokens.
Your provider decides whether its server uses encrypted HTTPS. If it only offers plain HTTP, your login and viewing requests travel unencrypted. Some providers need the option "Allow invalid SSL/TLS certificates". It lowers security, and it applies only to that playlist's server.
How to delete your data
We hold no data about you on our servers, so you delete your data on your PC. These steps cover it:
- Reset App (Settings > Danger Zone > Reset App) deletes everything in the app's data folder,
%APPDATA%\VelaStream. That covers settings, saved playlists and their logins, favorites, watch history, reminders, the recording schedule and the artwork cache. - Reset App does not delete the logs or the trailer browser profile in
%LOCALAPPDATA%\VelaStream, or recordings you have already saved. Delete those yourself if you want them gone. - To remove everything, uninstall VelaStream, then delete
%APPDATA%\VelaStreamand%LOCALAPPDATA%\VelaStreamif they are still there.
Depending on where you live, you may also have rights over your personal information, such as access, correction and deletion. Because we hold none of your viewing data, you can use the steps above. For anything else, contact us.
Changes to this policy
We update this policy when the way the app handles data changes. The date at the top shows when it last changed. Significant changes are also described in the release notes.
Contact
Questions about this policy: [email protected]. You can also visit the Support page.