Privacy Policy

Your privacy is important to us.

Last Updated: August 1st 2026

Welcome to ViraPlayer ("we," "our," or "us"). Wust Creative LLC (operating as ViraPlayer) is committed to protecting your privacy while you use our media player application.

1. Nature of Service

ViraPlayer is strictly a media player application. We do not provide, host, sell, or distribute any media content, media subscriptions, channels, or playlists. The application is a tool for users to play their own legally obtained content.

2. Data Collection

We believe in privacy by design. We collect minimal data necessary for the operation of our service:

  • Account Information: Email address for license activation and support.
  • Device Information: Device ID (HWID) to manage license activation limits (up to 5 devices per license).
  • Usage Data: Anonymous crash reports and performance metrics (optional within settings). We only record the technical memory state (stack trace) of the application anonymously at the exact moment of a crash.
  • Analytics Events (Opt-In): If you enable the analytics checkbox during onboarding, we record basic product-usage events (e.g., paywall views, plan selections, playlist setup outcomes) tied to your Device ID and a timestamp — never your IP address, precise location, or playback content. This is first-party data used solely to improve the app and is never shared with advertising networks. You can opt in or out at any time (Settings → About → Withdraw Data Consent).

We enforce a strict No-Logs Policy. We DO NOT store, log, or record your IP address in our databases under any circumstances. Furthermore, we DO NOT collect, view, or log the content of your playlists, the channels you watch, or your playback history. Your media consumption is private and local to your device.

Cloud Vault Sync (Optional): If you enable Cloud Vault Sync, your personalized media player configurations, layout preferences, favorites, and watch history are encrypted on your device using AES-256 (Zero-Knowledge Architecture) before being uploaded. Our servers store only the encrypted data and have no ability to access, read, or decrypt its contents. The encryption key never leaves your device.

3. Payments & Financial Data

We use the following third-party payment processors depending on your platform:

  • Stripe Managed Payments (Desktop/Web): Acts as the legal Merchant of Record (MoR) for desktop license purchases. Stripe handles global tax compliance, billing, and secure processing. ViraPlayer does not store or process your credit card information directly. All transactions are securely processed in accordance with their Privacy Policy.
  • RevenueCat (Mobile): Manages in-app subscriptions on iOS (App Store) and Android (Google Play). RevenueCat processes your subscription status and purchase receipts. See their Privacy Policy.
  • Apple / Google: On iOS, payments are processed through Apple's In-App Purchase system. On Android, payments are processed through Google Play Billing. These transactions are governed by Apple's and Google's respective privacy policies.

4. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

  • Consent (Art. 6(1)(a)): When you accept our Terms of Service and Privacy Policy during onboarding. You may withdraw your consent at any time via Settings → About → Withdraw Data Consent.
  • Contractual Necessity (Art. 6(1)(b)): Processing required to fulfill our service agreement — license activation, payment processing, and account management.
  • Legitimate Interest (Art. 6(1)(f)): Fraud prevention, security monitoring (HWID binding), license enforcement, and service improvement. We balance our interests against your rights and freedoms.

5. Data Security

In accordance with GDPR Article 32 (Security of Processing), we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • End-to-End Encryption (E2EE): Cloud Vault Sync data is encrypted on your device using AES-256-GCM before transmission. Our servers store only opaque encrypted data. The encryption key is generated and stored exclusively on your device(s) and is never transmitted to or accessible by our servers. This ensures that in the event of a server breach, your synchronized data remains protected.
  • Zero-Knowledge Architecture: We designed our sync infrastructure so that Wust Creative LLC has no technical capability to access, read, or decrypt your synchronized data. This minimizes the personal data we process and protects your privacy by design, as encouraged by GDPR Article 25 (Data Protection by Design and by Default).
  • Transport Security: All communications between your device and our servers are encrypted via TLS 1.2+ and routed through Cloudflare's global network for additional protection against interception.
  • Password Security: User passwords are hashed using industry-standard algorithms and are never stored in plaintext.

6. Data Storage & International Transfers

Wust Creative LLC is a United States-based company (Wyoming). Our application servers are hosted by Hetzner (Germany, EU), and our database infrastructure is hosted by Supabase (Ireland, EU). All network traffic between you and our services is routed through Cloudflare's encrypted global network.

By using ViraPlayer, you consent to your data being transferred to, stored, and processed in these locations in compliance with applicable data protection laws, including the European Union's General Data Protection Regulation (GDPR).

7. Data Retention

We retain your personal data only for as long as necessary to provide our services:

  • Account Data: Account data is deleted immediately when you delete your account. An audit record (email and action type only) is retained for fraud prevention purposes.
  • Payment Records: Transaction records are retained as required by applicable tax and financial regulations (typically 7 years).
  • Device Data: Device identifiers are removed immediately upon account deletion or license deactivation.
  • Analytics Events: Opt-in usage events are automatically deleted after 12 months, or immediately upon account deletion.

8. Your Rights

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Deletion: Request deletion of your account and associated personal data. You can delete your account at any time directly from the app (Account → Delete Account) or from our website at viraplayer.com/account. Deletion is immediate and permanent.
  • Right to Data Portability: Request your data in a structured, machine-readable format.
  • Right to Withdraw Consent: You may withdraw your consent for data processing at any time via the app (Settings → About → Withdraw Data Consent) or by contacting us. Withdrawal does not affect the lawfulness of processing performed before withdrawal.
  • Right to Object: You may object to data processing based on legitimate interest. We will cease processing unless we demonstrate compelling legitimate grounds.

To exercise any of these rights, please email [email protected]. We will respond within 30 days.

9. Sharing of Information

We do not sell, trade, or rent your personal identification information to others. We share data only with the following categories of third-party processors, solely for the purposes described above:

  • Stripe: Payment processing (desktop/web purchases).
  • RevenueCat: Subscription management (mobile in-app purchases).
  • Apple / Google: In-app purchase processing on their respective platforms.
  • Supabase: Database hosting (EU-Ireland).
  • Hetzner: Application server hosting (EU).
  • Cloudflare: Network security and DDoS protection.

10. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to ensure our website functions correctly and to analyze our traffic. We categorize these cookies into two types:

  • Strictly Necessary Cookies: These cookies are essential for the operation of our website, including session management, authentication, and security parameters provided by Cloudflare. They cannot be disabled.
  • Analytics Cookies (Google Analytics): If you grant explicit consent via our cookie banner, we use Google Analytics to collect anonymous information about how visitors use our website. This data is collected in aggregate form and helps us improve our service. You can withdraw this consent at any time by clearing your browser cookies or clicking the cookie settings button on our site.

11. Content Responsibility

ViraPlayer is a media player only. Users are solely responsible for the content they choose to play through the application. We do not endorse, promote, or condone the use of our application for accessing illegal or unauthorized content. Users must ensure they have the legal rights to access and play any content through ViraPlayer.

12. Children's Privacy

ViraPlayer is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected] and we will promptly delete such information.

13. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us: