Privacy Policy

Who we are

VelaStream is a media player for Windows. You bring your own playlists, guides and streams. We do not provide channels or content.

Privacy questions go to [email protected].

The short version

• Your playlist logins, settings, favorites, watch history, recordings and reminders stay on your device.
• We run no accounts and use no advertising trackers. Anonymous usage statistics are optional and stay off unless you switch them on (see Optional usage statistics below). The only other server we run is a small trial service that makes sure the free trial cannot be restarted by reinstalling (see Connections below).
• The app contacts only the services you set up, plus the third-party services listed below.
• Purchases are handled by Microsoft Store. We never see your payment details.

What stays on your device

VelaStream keeps the following on your PC, in your Windows user profile:

• Playlists and logins. Server addresses, usernames, passwords and playlist links. Passwords are encrypted with Windows DPAPI, so only your Windows account on this PC can read them.
• Settings and state. Your preferences, favorites, watch history, reminders and recording schedule.
• Recordings. Programs you record are saved as files in the recordings folder you choose.
• Artwork cache. Posters and other images the app has loaded, kept so they open faster.
• License status. A local copy of your Pro license status, so the app can work offline. It is protected with DPAPI too.
• Logs. A rolling app log kept only on this PC. The app never sends it anywhere by itself. If the app has to close after an unexpected error, it also saves a zip of the log in a crash-reports folder next to it; that zip stays on this PC too. Credentials and tokens are masked in it.
• Trailer player data. The embedded YouTube player uses a small browser profile (WebView2) on this PC. See the connections table below.
• Trial status. A protected local copy of your free-trial record, so the trial keeps its end time offline.
• Usage statistics choice. Your on or off choice and, only while it is on, a random anonymous ID. Turning it off deletes the ID.

Connections the app makes

The app contacts a service only when you use the feature that needs it. These are all the destinations it can reach.

This product uses the TMDB API but is not endorsed or certified by TMDB.

You can switch off the DNS-over-HTTPS image fallback in Settings. When it is off, only your system DNS is used, so some artwork may load slowly or not at all.

Optional usage statistics

VelaStream can send anonymous usage statistics, but only if you choose to. You can switch this on where you pick how to add a playlist, or at any time in Settings. It is off by default, and nothing is sent until you turn it on.

• What is collected. A random anonymous ID, the app version, the Windows version, the app language, your plan, which sections you open, which playlist type you add and whether it worked, and playback quality figures: whether playback started and about how fast, how often it buffered, the video and audio format, hardware decoding and a rough resolution.
• What is never collected. Playlist addresses, usernames, passwords, MAC addresses, channel, movie or series names, stream addresses, what you watch, your name or e-mail, your IP address, or your location.
• Who handles it. The app sends the data to our own relay on Cloudflare, which forwards it to Google Analytics 4 (Google). Google stores it for us, for at most 14 months. We do not use it for advertising, and ad personalization is switched off. Google may process the data in countries outside your own, including the United States.
• Your choice. The legal basis is your consent. You can withdraw it at any time by turning the switch off in Settings. That stops all sending and deletes the anonymous ID on your PC. Because the ID is deleted, nobody can later tell which figures were yours; the data is anonymous and is removed automatically when its retention period ends.

This website

This website uses the Google tag (Google Ads) to measure whether visits come from our ads. The tag loads from Google (googletagmanager.com) in a restricted mode: it sets no cookies and Google receives no advertising identifiers unless you accept in the cookie notice. If you accept, Google may set cookies and receive your IP address, browser details and the pages you view, under Google's own privacy policy. You can change your choice at any time with Cookie settings in the footer. Its fonts, images and videos are served from this site. The website is delivered through Cloudflare. The web server and Cloudflare process technical request data, such as your IP address, browser details and the pages requested, to deliver and secure the site. The server keeps these logs only as long as needed for security and troubleshooting, and we do not use them to identify you.

Purchases and subscriptions

VelaStream Pro is sold through Microsoft Store, as a monthly or yearly subscription or a one-time lifetime purchase. Microsoft Store processes your payment and account details under Microsoft's own privacy statement. We never receive payment details, and the app never asks for them.

To check your license, the app reads the purchase status that Microsoft Store provides on this PC. It keeps a local copy so Pro can keep working offline for a limited grace period.

Restoring purchases and managing a subscription use Settings and Microsoft's own pages. Those pages open in your browser or in Microsoft Store.

Children and parental controls

VelaStream is not directed at children, and we do not knowingly collect information from anyone, children included.

Parental controls hide chosen groups behind a 4-digit PIN. They are a household convenience, not a security measure. The PIN is stored on this PC as a salted hash, and anyone with access to the settings files can work around it. The forgot-PIN option clears the PIN if you type RESET. Do not rely on it to stop a determined user.

Security

Playlist passwords and the license cache are protected with Windows DPAPI for your Windows account. The app's log masks credentials and tokens.

Your provider decides whether its server uses encrypted HTTPS. If it only offers plain HTTP, your login and viewing requests travel unencrypted. Some providers need the option "Allow invalid SSL/TLS certificates". It lowers security, and it applies only to that playlist's server.

How to delete your data

The only data we hold on our own server is the free-trial record: a random install ID, one-way hashes of your PC identifiers, and the trial start and end times. It contains no name, contact details, playlist or viewing information, and it is kept so the trial cannot be restarted (deleting it would give a new trial, so it is only removed on request, see Contact). If you opted in to usage statistics, anonymous figures also sit in Google Analytics (see Optional usage statistics). Everything else is on your PC, and you delete it there. These steps cover it:

• Reset App (Settings > Danger Zone > Reset App) deletes everything in the app's data folder, %APPDATA%\VelaStream. That covers settings, saved playlists and their logins, favorites, watch history, reminders, the recording schedule and the artwork cache.
• Reset App does not delete the logs or the trailer browser profile in %LOCALAPPDATA%\VelaStream, or recordings you have already saved. Delete those yourself if you want them gone.
• To remove everything, uninstall VelaStream, then delete %APPDATA%\VelaStream and %LOCALAPPDATA%\VelaStream if they are still there.

Depending on where you live, you may also have rights over your personal information, such as access, correction, deletion and objection under the GDPR in Europe or under Türkiye's Personal Data Protection Law (KVKK, Law No. 6698), and the right to complain to your data protection authority. Because we hold none of your viewing data, you can use the steps above. For anything else, contact us at [email protected].

Changes to this policy

We update this policy when the way the app handles data changes. The date at the top shows when it last changed. Significant changes are also described in the release notes.

Contact

Questions about this policy: [email protected]. You can also visit the Support page.