Velniro

Privacy

Last updated 31 October 2026

Short version: Velniro has no ads, no analytics and no tracking. Your library and history stay on your own device or in your own browser. A Velniro account is optional; if you create one and log in, it also keeps a copy of your watch history, progress and lists so they match on all your devices, and you can delete it at any time.

This website

• The website uses no analytics, ads or tracking scripts, and sets no cookies except the login cookie described under Velniro accounts, and only when you log in. Its fonts and images are served from velniro.net itself.
• The website and downloads are delivered by Cloudflare. Like any web host, Cloudflare processes your IP address and basic request details (such as the page requested, time and browser type) to deliver the site and protect it from abuse. See Cloudflare's privacy policy.
• The download page reads a small file with the current version number from download.velniro.net. No personal information is sent with it.

Velniro Discover (the web app)

• Stored in your browser: your profiles, watchlist, favorites, ratings, watched episodes, playlists, poster choices and settings are kept in your browser's storage on your device, and pictures you add (custom posters and a background) in its picture storage. When you're logged in to a Velniro account, your watchlist, favorites and watched movies and episodes are also synced with it (see "Sync" under Velniro accounts); everything else stays in your browser. Profile PINs are stored only as a salted hash.
• Title information: your browser gets title information directly from Cinemeta (run by Stremio) and AniList, and loads pictures from their image servers (metahub.space and anilist.co). Those services receive your IP address and which titles or searches you look at, under their own privacy policies.
• More title information: where-to-watch lists, movie collections and other posters come from TMDB (with streaming data from JustWatch), and comments come from Trakt. Your browser asks Velniro's server for these, and the server asks TMDB or Trakt, so those services don't see your IP address. The server keeps no record of who asked; shared answers are cached for everyone, and Cloudflare limits how many requests one address can make, to prevent abuse.
• AniList and MyAnimeList, if you connect them: signing in happens on their own sites. The sign-in token is kept in your browser for the profile that connected it. AniList is contacted directly from your browser. MyAnimeList doesn't allow that, so its sign-in and the updates you make pass through Velniro's server, which forwards them and stores nothing. Only changes you make in Velniro Discover are sent; disconnecting deletes the token from your browser.
• Trailers: a trailer loads from YouTube's privacy-enhanced player (youtube-nocookie.com) only when you press Trailer. YouTube's privacy policy applies to what you watch there.
• Links: links to official streaming services, JustWatch, IMDb, AniList and MyAnimeList open those sites, which have their own privacy policies.
• Your control: export, import or clear your library in Velniro Discover's Library or Settings page, or clear your browser's data for velniro.net.

Velniro accounts

You don't need an account to use Velniro. If you create one on velniro.net, this is what happens:

• What we keep: your email address and whether it's confirmed; a value made from your password (see below); the times the account was created and changed; and a count of wrong passwords in a row, so repeated guessing can be paused.
• Sync: while you're logged in, the apps and the website keep a copy of each profile's watch history (which movies and episodes you watched and when), where you left off in each, your watchlist and favorites, and what you removed from them, with your account, so every device you log in on shows the same. Each entry holds the title's name, poster address, year and the IDs needed to find it (such as its IMDb or AniList ID). Profiles are matched by name, and the first profile on each device is your main one. Your searches, ratings, playlists, settings, add-ons and connected services are not synced. Logging out stops syncing on that device; deleting the account deletes this copy.
• Your password: it never reaches us. The website and the apps scramble it on your own device (PBKDF2 with 600,000 rounds and a random salt) and send only the result, which our server scrambles again with a secret key kept apart from the database. Not even we can turn it back into your password.
• Logins: for each device you log in on, we keep a session record with a random code (stored only in scrambled form), whether it's the website or the Mac or Windows app, a device label (your browser and system, such as "Chrome on Windows", or your computer's name in the apps), and when it was created and last used. You can see and end every session on your account page. A session ends after 90 days without use.
• Cookie: when you log in on the website, it sets one cookie, __Host-mystream_session, which holds your session code. It's needed to keep you logged in, can't be read by scripts, is only sent to velniro.net over a secure connection, and is removed when you log out. The apps keep their session code in the macOS Keychain or encrypted for your Windows account.
• Emails: we email you only about your account: confirming your address, resetting your password, and telling you when your password or email address changes or the account is deleted. They're sent through Mailtrap, which receives your email address and the message to deliver it. Links in these emails work once and expire after one hour (password reset) or 24 hours.
• Breached-password check: when you choose a password on the website, your browser asks Have I Been Pwned whether it has appeared in a known data breach. Only the first five characters of a SHA-1 hash of the password are sent, never the password, and the answer is checked in your browser.
• Where it's kept: in a Cloudflare D1 database that only Velniro's server can reach. Cloudflare also sees your IP address when you use the account, as for any request to the site, and limits how often one address can try to log in.
• How long: until you delete the account. Deleting it on your account page removes your email address, password value, every session and your synced history and lists at once; Cloudflare's database recovery copies roll off within 30 days. Sign-ups whose email address is never confirmed are deleted after about a week.
• Why: we use this information only to provide the account you asked for and to keep it secure. We never sell it, share it for advertising or use it to profile you.

The Velniro app

• Stored on your computer: your profiles, watchlist, favorites, playlists, ratings, watch history, settings and any pictures you add. Sign-in tokens and keys are kept in the macOS Keychain on Mac, and encrypted for your Windows account on Windows.
• Velniro servers: the app doesn't send your usage to us, and there is no telemetry or crash reporting to us. If you log in to a Velniro account, the app sends your email address and scrambled password to velniro.net to log in, checks now and then that the session is still valid, and syncs your watch history, progress and lists with your account (see "Sync" under Velniro accounts). Without an account, your library and history never leave your computer.
• Services you use: the app connects directly to the services needed for what you do, and those services receive your IP address and the request itself. These include metadata and artwork services (for example TMDB, Cinemeta, AniList, Kitsu and TVmaze), accounts you connect (AniList, MyAnimeList), Discord if you turn on your Discord status, comments and ratings services, and every add-on you install. Each service handles that data under its own privacy policy.
• Features you start: subtitle search sends the title to the subtitle service; song identification sends a short audio clip to AudD only when you ask it to; debrid services you connect receive the links you send them.
• Add-ons: add-ons you install see which titles you look up and play. Only install add-ons you trust.
• Discord status: if you turn it on, Discord shows what you're watching. With poster sharing on, Discord fetches the poster through images.weserv.nl; your own IP address isn't sent there.
• Updates: the app checks download.velniro.net for a newer version. This sends no personal information beyond what any web request contains.
• Bug reports: Report a Bug opens an email in your own mail app, addressed to support@velniro.net, with your Velniro and macOS versions filled in. Nothing is sent until you send it, and we use what you write only to look into the problem.
• Diagnostics: if you export diagnostics, the file stays on your Mac until you choose to share it. It contains no tokens, titles or account names.

Children

Velniro is not directed at children under 13, and we don't knowingly collect personal information from anyone.

Your choices and rights

Your library and history are stored on your own device or browser, so you control them: delete items in the app, sign out of services, or delete the app and its data. If you have a Velniro account, its page shows what we hold (your email address and your logins), lets you change your email address and end sessions, and deletes the account together with your synced history and lists. You can also ask us at legal@velniro.net for a copy of your account data, to correct it or to delete it, and you can complain to your local data protection authority. For data held by a service you connected, contact that service.