Privacy policy

What Velto is

A player for IPTV subscriptions you already own. Velto provides no content.

Data we handle

• Provider credentials (Xtream server URL, username, password): entered by you, stored on your device and, to organize your catalog, on the Velto server.
• Catalog data (channel, movie and series lists) fetched from your provider, cached on the Velto server.
• App data: favorites, watch progress, settings.
• Search: titles may be matched against The Movie Database (TMDB) metadata, a shared index not linked to you. This product uses the TMDB API but is not endorsed or certified by TMDB.
• Technical logs (IP address, timestamps), kept for a limited time for security and debugging.
• Anonymous usage statistics: counts of how often each feature is used (for example “a movie was played”, “a search was run”), added up per day, platform and app version. They carry no account, device or advertising identifier and never what you watch or search for, so they cannot be linked to you. Kept 13 months. You can turn them off in Settings › About.
• Problem reports and feedback, only when you send one from Settings › Report a problem: your message, your account name and, if you leave “Attach diagnostics” checked, the app version, device type, language, your recent steps in the app (screens opened, titles played), the player log and recent errors. You can read the diagnostics before sending. No password or stream address is included. Kept until the issue is resolved, at most 2 years.

What we do not do

No ads, no third-party analytics or crash-reporting trackers, no sale of data, no tracking across apps.

Sharing

Data is sent to your IPTV provider (streams) and to our hosting provider. Problem reports are also stored in our private issue tracker, hosted by GitHub. Nothing else.

Retention and deletion

To delete your Velto account and all associated data, email [email protected] from your account’s email address with the subject “Account deletion”. We process the request within 30 days and confirm by email.

Security

Traffic uses HTTPS.

Children

Not directed to children under 13 (16 in the EU).

Your rights (GDPR)

Access, rectification, erasure, portability, objection: contact [email protected].

Changes

We will update this page and its date.