Privacy Policy

Last updated 5 September 2026

The short version. Velora Player has no account system and no servers of its own. We collect nothing, we receive nothing, and we run no analytics or advertising code. Everything the app knows about you lives on your device, or in your own iCloud, where we cannot reach it.

1. Who this is about

Velora Player (“Velora”, “the app”) is published by Veltro Forge (“we”, “us”). This policy covers the iPhone, iPad and Apple TV apps, and this website at velora.veltroforge.com.

Velora is a media player. It contains no channels, films or programmes of its own. It plays playlists that you supply, from a provider that you chose and pay. That distinction shapes everything below.

2. What we collect

Nothing. We operate no backend, no account database, no logging service and no crash-reporting SDK. There is no request the app can make to us, because there is no endpoint of ours to make it to.

We do not collect, and therefore cannot sell, share or lose:

your name, email address or any other identifier;
your provider's address, your username or your password;
what you watch, when you watch it, or how far through it you got;
your IP address, device identifiers or advertising identifiers;
usage analytics, event streams or telemetry of any kind.

3. What the app stores on your device

To do its job, Velora keeps the following locally:

Playlist configuration — the server address, username and display name for each connected Xtream or M3U source.
Provider passwords — stored in the iOS/tvOS Keychain, the system's encrypted credential store. They are never written into a preferences file and never transmitted anywhere other than to your own provider when the app authenticates.
A catalogue cache — the channel, film and series listings returned by your provider, kept so the app opens into your library instead of re-downloading everything at each launch.
Your choices — favourites, My List, resume points, preferred layouts and playback settings.

Deleting the app removes all of it.

4. iCloud

If you are signed in to iCloud, Velora mirrors four things through Apple's key-value store so they follow you between your own devices: your playlists, your favourites, your My List and your resume points. Provider passwords travel separately, through iCloud Keychain, which is how your Apple TV can sign in without you typing a password on a remote.

This is your iCloud container, governed by Apple's privacy policy and encrypted by Apple. We have no access to it and no ability to read, export or delete what it holds.

If you are not signed in to iCloud, or you turn iCloud off for Velora, the mirror is simply inert and the app runs entirely on local state. Nothing breaks.

5. Who your device does talk to

Velora makes network requests to exactly two kinds of destination, both of your choosing:

Your IPTV provider

The app connects directly to the server address you entered, to authenticate, fetch the catalogue, download the XMLTV guide and stream video. That provider will see your IP address, your credentials and your requests, and may keep its own logs. We are not a party to that connection and have no visibility into it. Your provider's own privacy policy applies — please read it.

Many IPTV panels are served over plain http rather than https, and the app permits this because you, not we, choose the host. Where your provider offers an https address, prefer it.

Artwork and trailers

Poster and channel-logo images are fetched from whatever URLs your provider puts in the playlist — those hosts will see your IP address. If you tap a trailer, the app hands the video off to the YouTube app or to youtube.com, at which point Google's terms and privacy policy apply.

6. This website

velora.veltroforge.com is a set of static pages. It runs no analytics, sets no cookies and embeds no third-party scripts, fonts or tracking pixels. Our hosting provider, Hostinger, keeps standard server access logs (IP address, timestamp, requested page) for security and operational purposes, as any web server does.

If you email us using a link on this site, we receive your message and your email address, and we keep them only as long as needed to answer you.

7. Children

Velora is not directed at children under 13, and we knowingly collect no data from anyone at all. Because the app plays whatever your provider supplies, and we can neither see nor filter that content, parents should use Apple's Screen Time restrictions to control access.

8. Your rights

Data-protection law gives you rights of access, correction, deletion, portability and objection over personal data a company holds about you. We hold none, so there is nothing for us to produce or erase. To remove everything Velora has stored, delete the app; to remove the iCloud mirror, turn off iCloud for Velora in Settings or delete the app's iCloud data from your Apple ID settings.

For anything held by your IPTV provider, direct your request to them.

9. Changes

If this policy changes, the revised version appears on this page with a new date. Material changes will also be noted in the app's release notes.

10. Contact

Questions about this policy: privacy@veltroforge.com
Everything else: support@veltroforge.com