Privacy

Who is responsible

Velcast and this website are published by [to be completed], [to be completed], which is responsible for the data described here. For any question about your data, or to exercise your rights, write to [email protected].

Last updated: November 2026.

Velcast provides no content

Velcast is a media player and a library manager. It provides, hosts and indexes no channel, film or series: you add your own sources. On a phone, a tablet or a TV, what your sources stream goes straight to your device, and so does what you download in the computer app; our servers never see it — unless, as the host of a watch party, you choose to share your playback: our server then reads that stream and converts it for the members of the party, for as long as you share it, without keeping it.

Your account

Velcast needs an account so your devices stay in step. We keep: your email address; your password, only as a hash; the devices signed in (an identifier the app draws for itself, the device model or browser, when each was last active, its notification token if you allowed notifications); your profiles (name, adult or child, language, the drawing chosen as avatar, parental restrictions); where each profile stopped watching each title, and its favourites; your settings, including the consent choices below.

Purpose: signing you in, keeping your devices in step, the device limit and the security of your account. Legal basis: the contract between us (GDPR art. 6(1)(b)), and our legitimate interest in keeping accounts secure (art. 6(1)(f)).

Your sources

We keep the name and the type of each source in clear. Its address, login, password and categories are sealed on your device, with a key derived from your password, before they reach us: we cannot read them. If you reset a forgotten password, sources sealed with the old one can no longer be opened and have to be added again.

Protection against abuse

To stop password guessing and notice an account shared beyond its household, our server counts, in its memory only: the requests of each IP address, account and device, over a minute or an hour; for each account, the networks it is used from (the /24 or /48 prefix of the IP address, never the full address) over an hour, its devices over a day and, when the content delivery network in front of our server supplies it, its countries over a day; and the email addresses that sign-ins from one IP address were refused for, as hashes, over an hour. None of this is written to our database or to a file, and it is lost when the server restarts. Legal basis: our legitimate interest in keeping accounts and the service secure (art. 6(1)(f)).

When a count goes past what ordinary use reaches, the server writes an alert for our team. The alert names the account or, for an IP address, a keyed digest of it: the key is drawn when the server starts and never stored, so the digest cannot be turned back into the address. Sign-ins from an address that is guessing passwords are refused for an hour, and an account used like a shared one may have its newly signed-in devices kept off it for up to a day.

Artwork, details, subtitles and skip times

To show posters and details, find subtitles you ask for, and skip anime intros, the app sends our server the title, year or identifier of the item concerned. Our server asks TMDB, OpenSubtitles or AniSkip without any identifier of your account, and keeps only a daily count of these requests per account, for the quota.

A trailer is played by YouTube, and only when you press « Watch the trailer »: in YouTube’s player from youtube-nocookie.com on the web and the computer, in the YouTube app or your browser on a phone or a TV. Playing it sends YouTube your IP address and the video you watch, under YouTube’s own privacy policy. Nothing is sent to YouTube before you press.

To skip intros and credits, the app also asks TheIntroDB directly for the times of what you play: the title’s TMDB identifier, the season and episode, the duration, and, as with any request, your IP address. Posters are loaded from TMDB’s image server.

Each profile can turn this off in Settings › Playback › « Use TheIntroDB »: from then on nothing is sent to TheIntroDB. Its answers stay in the app’s memory until it closes; they are never stored, synchronised or shared. TheIntroDB is asked from your device only, never through our servers, whatever your plan.

Optional, and only with your consent

Each of these is a separate switch, off until you turn it on, which you can turn off at any time in Settings › Account and sources › Privacy. Your choice applies to every device of your account. Legal basis: your consent (art. 6(1)(a)).

Crash reports: when the app crashes, the error and the app’s last steps are sent to our crash reporting service, Sentry, to fix it. Performance measurements: how long screens and playback take to load, on some of your sessions. Neither includes your email address, your account identifier, your passwords or your sources; both are kept 30 days.

Your AI: if you turn it on and enter your own key for OpenAI, Anthropic, Google or Mistral, the app sends that provider, directly and never through us, what each request needs: your questions and searches, the titles, years, genres, directors and cast of your library and of what you watch, and for the assistant your favourites, folders, progress, the TV guide, your language and your time zone. Never your email address, your password or your sources. That provider’s own policy applies to what it receives. You can withdraw this consent on the AI page, and read then purge the list of what was sent.

With each message to support, you choose whether to join technical information: the app’s version, the system, the device model and the last screen.

Messages to support

A message written in Contact us is mailed to our team with your address to reply to. We do not keep it on our servers; it stays in our support mailbox for 12 months after the last exchange, and is deleted when your account is.

Services you connect

Trakt, Simkl and MDBList, your providers and your own media servers are services you choose, under your own accounts and their own policies. Their keys stay on your device; signing in to Trakt passes through our server, which keeps nothing of it.

Velcast Plus

Velcast Plus is free at launch. When it can be bought, purchases in the app will be handled by Apple or Google through RevenueCat, and purchases on the web by Stripe, which keeps card details itself; this page will say so before then.

Who processes data for us

[to be completed], which hosts our server, [to be completed], which hosts its database, [to be completed], which serves the web app, object storage for the profile pictures the API accepts, Brevo, a French company that hosts its data in the European Union, for our emails (the link to choose a new password, your messages to support), Expo for notifications and, once enabled and only with your consent, Sentry. Each acts on our instructions only. We sell no data, show no advertising, use no analytics and track you nowhere.

Where one of them is established outside the European Union or reaches the data from abroad, as a US company does, the transfer rests on the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep it

Your account and what it holds: until you delete it. An account none of whose devices has been used for two years, with no subscription in force, is erased as if you had deleted it.

Daily request counts: 90 days. Expired sign-in tokens, password-reset and TV sign-in codes, and records of data exports: 30 days. Server logs, which name the account and the route, never an IP address, a query or content, and name a client in an abuse alert only by the digest described above: 30 days. Support messages: 12 months after the last exchange. Crash reports: 30 days.

Your rights

Access and portability: in Settings › Account and sources › Account › Security and data, download a copy of everything your account holds, as a JSON file. Your sources appear in it sealed, as we keep them.

Erasure: delete your account in the same place, or in the Velcast web app. It is erased from our database and our storage at once, and our team is told to delete your messages to support. What is kept only on a device stays there until you remove the app; films downloaded in the computer app stay in the folder you chose until you delete them, in Velcast or from that folder.

You can also correct your data in the app, withdraw a consent at any time, object to a processing, or ask us anything at [email protected]. You may lodge a complaint with your data protection authority (in France, the CNIL).

Children

Velcast is meant for adults: you need to be 18 to create an account. Child profiles are a parental tool, managed by the adult who holds the account.

Security

Connections to our server are encrypted, passwords are stored only as hashes, sources are sealed on your device, and keys stay in your device’s secure storage.

This website

This website uses no cookies, no analytics and no third-party scripts, and asks you for nothing. Its host ([to be completed]) may briefly keep technical logs, such as the IP address, the page and the date, for security. Fonts and images are served by the site itself. The download buttons lead to app stores, which apply their own policies.