Privacy policy
Last updated 2026-09-12.
The short version
Your server sign-in details never leave your device. Your favourites and viewing history sync as opaque numbers that we cannot turn back into names. We show adverts on the free tier. We sell nothing to anybody.
Your sign-in details
The address, username and password of any server you add — or the LinkACode ID you used instead of an address — are stored only on your device, in the iOS Keychain. They are never sent to us, in any form, encrypted or otherwise. When you sign in on a second device you enter them again.
That is a deliberate inconvenience. It means we are never a place where someone's sign-in details can be stolen, demanded or leaked, and it means we cannot tell anyone which servers you use — including anyone who asks us officially.
What syncs, if you have an account
An account is only needed for Vizione+ and for syncing. Without one, nothing at all leaves your device.
| We store | We never store |
|---|---|
| Favourites as a playlist reference, a content type and an item id | The names of anything you watch |
| Where you got to in something, as an id and a position | What it was called |
| Playlist names and profile names, encrypted on your device | Those names in readable form |
| Settings such as guide offset and accent colour | Any server address |
The playlist reference is generated randomly on your device and is not derived from the server, so we cannot tell which servers you use or group users by server.
What we cannot do
We cannot tell you, ourselves, or anyone who asks, what you have watched. Not because we decline to, but because the information does not exist here. This also means we can never build viewing analytics. That is the trade, and we chose it.
Account information
If you create an account we hold your email address, which sign-in method you used, your subscription status, and a list of your devices with the names you gave them.
Advertising
The free tier shows adverts, served by a third-party network which sets its own identifiers subject to the permission iOS asks you for. If you decline tracking you still see adverts; they are simply not personalised. Vizione+ removes them entirely.
IP addresses
Where we record an address for security purposes, it is hashed first and the hash expires. We do not keep the address itself.
Children
Vizione is not directed at children. Kids profiles are a control for the adult who owns the device; a child's profile name is encrypted before it leaves the device and is unreadable to us.
Legal basis and retention
We process the little we hold to provide the service you asked for — the contract between us — and to keep it secure, which is our legitimate interest. We keep it for as long as your account exists. Delete the account and it goes with it.
Suppliers
Cloudflare hosts the service. Resend delivers our email. Apple handles payment for subscriptions and tells us only whether yours is active. We share your information with nobody else, and we sell it to nobody at all.
Your rights
You can see everything we hold about you in the app, change it, or delete the account, which deletes all of it. If you want a copy or have a complaint, email support@vizioneplayer.com. If you are in the UK you may also complain to the Information Commissioner's Office.