ViraPlayer LogoVIRAPLAYER

Privacy Policy

Your privacy is important to us.

Last Updated: October 21st 2026

Welcome to ViraPlayer ("we," "our," or "us"). Wust Creative LLC (operating as ViraPlayer) is committed to protecting your privacy while you use our media player application.

1. Nature of Service

ViraPlayer is strictly a media player application. We do not provide, host, sell, or distribute any media content, media subscriptions, channels, or playlists. The application is a tool for users to play their own legally obtained content.

2. Data Collection

We believe in privacy by design. We collect minimal data necessary for the operation of our service:

  • Account Information: Email address for license activation and support.
  • Device Information: Device ID (HWID) to manage license activation limits (up to 5 devices per license).
  • Crash & Freeze Reports (On by Default, You Can Turn Them Off): When the app crashes, freezes or is closed by the system for not responding, we record technical details of that moment: the app's thread dump (stack trace), the steps of the app shortly before it (for example "opened the Movies tab", never a title or category name), the app version, device model, Android version and memory state, tied to your Device ID. These reports never contain your playlists, stream addresses, what you watch, your email or your account data; addresses and emails are removed on the device before anything is sent. We use them only to find and fix crashes and freezes. They are sent by default on the basis of our legitimate interest in a working app, and you can object at any time by turning them off in Settings → Privacy → Crash & freeze reports. They are not used for tracking: they never leave ViraPlayer for another company or app, and are never used for advertising.
  • Product Usage Events (On by Default, You Can Turn Them Off): We record basic product-usage and performance events (e.g., session duration, feature interactions, playlist setup outcomes, paywall views, and plan selections) tied to your Device ID and a timestamp — never your IP address, precise location, playlist URLs, or playback content. This is strictly first-party data used solely to improve the app and diagnose product issues. They are sent by default on the basis of our legitimate interest in improving the app, and you can object at any time by turning them off in Settings → Privacy → Analytics & Performance Data. They are never shared with third parties or advertising networks and are never used for cross-app tracking.
  • Before You Accept the Terms: While the first onboarding screen is shown and before you accept, the app sends nothing beyond the license and trial check every start needs (Device ID, see Device Information) and two more things, neither tied to your Device ID, your account or any other identifier: (1) an anonymous count that the welcome screen was shown, accepted or left, with how many seconds it was open, the app version and the platform; (2) crash & freeze reports from that moment, as described above but without your Device ID. No product usage events are sent until you accept. The count tells us how many people get past the first screen and whether it crashes; it is based on our legitimate interest in a working first screen, and because it cannot be linked to you, it cannot be traced back to you afterwards.

We enforce a strict No-Logs Policy. We DO NOT store, log, or record your IP address in our databases under any circumstances. Furthermore, we DO NOT collect, view, or log the content of your playlists, the channels you watch, or your playback history. Your media consumption is private and local to your device.

Cloud Vault Sync (Optional): If you enable Cloud Vault Sync, your personalized media player configurations, layout preferences, favorites, and watch history are encrypted on your device using AES-256 (Zero-Knowledge Architecture) before being uploaded. Our servers store only the encrypted data and have no ability to access, read, or decrypt its contents. The encryption key never leaves your device.

3. Payments & Financial Data

We use the following third-party payment processors depending on your platform:

  • Stripe Managed Payments (Desktop/Web): Acts as the legal Merchant of Record (MoR) for desktop license purchases. Stripe handles global tax compliance, billing, and secure processing. ViraPlayer does not store or process your credit card information directly. All transactions are securely processed in accordance with their Privacy Policy.
  • RevenueCat (Mobile): Manages in-app subscriptions on iOS (App Store) and Android (Google Play). RevenueCat processes your subscription status and purchase receipts. See their Privacy Policy.
  • Apple / Google: On iOS, payments are processed through Apple's In-App Purchase system. On Android, payments are processed through Google Play Billing. These transactions are governed by Apple's and Google's respective privacy policies.

4. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

  • Consent (Art. 6(1)(a)): When you accept our Terms of Service and Privacy Policy during onboarding. You may withdraw your consent at any time via Settings → Privacy → Withdraw Data Consent.
  • Contractual Necessity (Art. 6(1)(b)): Processing required to fulfill our service agreement — license activation, payment processing, and account management.
  • Legitimate Interest (Art. 6(1)(f)): Fraud prevention, security monitoring (HWID binding), license enforcement, first-party product usage events (service improvement), anonymous welcome-screen counts, and crash & freeze reports. We balance our interests against your rights and freedoms; you can object to product usage events or crash & freeze reports at any time in Settings → Privacy (Art. 21).

5. Data Security

In accordance with GDPR Article 32 (Security of Processing), we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • End-to-End Encryption (E2EE): Cloud Vault Sync data is encrypted on your device using AES-256-GCM before transmission. Our servers store only opaque encrypted data. The encryption key is generated and stored exclusively on your device(s) and is never transmitted to or accessible by our servers. This ensures that in the event of a server breach, your synchronized data remains protected.
  • Zero-Knowledge Architecture: We designed our sync infrastructure so that Wust Creative LLC has no technical capability to access, read, or decrypt your synchronized data. This minimizes the personal data we process and protects your privacy by design, as encouraged by GDPR Article 25 (Data Protection by Design and by Default).
  • Transport Security: All communications between your device and our servers are encrypted via TLS 1.2+ and routed through Cloudflare's global network for additional protection against interception.
  • Password Security: User passwords are hashed using industry-standard algorithms and are never stored in plaintext.

6. Data Storage & International Transfers

Wust Creative LLC is a United States-based company (Wyoming). Our application servers are hosted by Hetzner (Germany, EU), and our database infrastructure is hosted by Supabase (Ireland, EU). All network traffic between you and our services is routed through Cloudflare's encrypted global network.

By using ViraPlayer, you consent to your data being transferred to, stored, and processed in these locations in compliance with applicable data protection laws, including the European Union's General Data Protection Regulation (GDPR).

7. Data Retention

We retain your personal data only for as long as necessary to provide our services:

  • Account Data: Account data is deleted immediately when you delete your account. An audit record (email and action type only) is retained for fraud prevention purposes.
  • Payment Records: Transaction records are retained as required by applicable tax and financial regulations (typically 7 years).
  • Device Data: Device identifiers are removed immediately upon account deletion or license deactivation.
  • Product Usage & Diagnostic Events: Usage and diagnostic events are automatically deleted after 12 months, or immediately upon account deletion.

8. Your Rights

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Deletion: Request deletion of your account and associated personal data. You can delete your account at any time directly from the app (Account → Delete Account) or from our website at viraplayer.com/account. Deletion is immediate and permanent.
  • Right to Data Portability: Request your data in a structured, machine-readable format.
  • Right to Withdraw Consent: You may withdraw your consent for data processing at any time via the app (Settings → Privacy → Withdraw Data Consent) or by contacting us. Withdrawal does not affect the lawfulness of processing performed before withdrawal.
  • Right to Object: You may object to data processing based on legitimate interest. We will cease processing unless we demonstrate compelling legitimate grounds.

To exercise any of these rights, please email [email protected]. We will respond within 30 days.

9. Sharing of Information

We do not sell, trade, or rent your personal identification information to others. We share data only with the following categories of third-party processors, solely for the purposes described above:

  • Stripe: Payment processing (desktop/web purchases).
  • RevenueCat: Subscription management (mobile in-app purchases).
  • Apple / Google: In-app purchase processing on their respective platforms.
  • Supabase: Database hosting (EU-Ireland).
  • Hetzner: Application server hosting (EU).
  • Cloudflare: Network security and DDoS protection.

10. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to ensure our website functions correctly and to analyze our traffic. We categorize these cookies into two types:

  • Strictly Necessary Cookies: These cookies are essential for the operation of our website, including session management, authentication, and security parameters provided by Cloudflare. They cannot be disabled.
  • Analytics Cookies (Google Analytics): If you grant explicit consent via our cookie banner, we use Google Analytics to collect anonymous information about how visitors use our website. This data is collected in aggregate form and helps us improve our service. You can withdraw this consent at any time by clearing your browser cookies or clicking the cookie settings button on our site.

11. Content Responsibility

ViraPlayer is a media player only. Users are solely responsible for the content they choose to play through the application. We do not endorse, promote, or condone the use of our application for accessing illegal or unauthorized content. Users must ensure they have the legal rights to access and play any content through ViraPlayer.

12. Children's Privacy

ViraPlayer is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected] and we will promptly delete such information.

13. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us: