Privacy Policy

Last updated: May 12, 2026

1. About Vellora

Vellora is an unofficial client application for Emby servers ( emby.media). The app lets users access and play content hosted on an Emby server they have legitimate access to.

Vellora does not host, distribute or provide access to any content of its own. Using the app requires either having your own Emby server or being given an account by the administrator of a third-party server.

2. Data we process

Vellora processes the following data exclusively on your device, and sends it only to the Emby server you configure:

• Login credentials: the username and password you enter to connect to your Emby server. Stored locally on the device and sent directly to the server you specify.
• Server URL: the address of the Emby server you connect to.
• Session token: issued by the server after a successful login. Stored in the app's local storage on your device.
• Device identifier: randomly generated on first launch (e.g. vellora-1234567890-abc). It allows the Emby server to identify this device so the administrator can manage active sessions.
• Playback preferences: preferred audio and subtitle language, playback speed. Stored locally only.
• Playback position: the progress of each video is sent to the Emby server to sync "Continue Watching" across devices. This feature is provided by Emby itself.

3. Data we do NOT collect

The Vellora developers do not collect, store or receive:

• Personal data of any kind
• Usage data or behavioral analytics
• Advertising identifiers
• Device location
• Contact list, photos or device files
• Watch history
• Your Emby server credentials

Vellora contains no ads and does not connect to servers controlled by its developers for commercial purposes. The only exception is the anonymous submission of error reports to Sentry (see section 5), used exclusively for diagnosing technical issues.

4. Third-party services

Vellora connects to the following services:

• Your Emby server: when you log in and while you use the app. The URL is provided by you or by Emby Connect.
• Emby Connect (connect.emby.media): Emby's official service for linking accounts with servers. Only used if you choose this login method. More details in the Emby Connect section.
• Sentry (sentry.io): error reporting service. Only connects when the app encounters a technical fault, to submit an anonymous report. More details in the Error telemetry section.

5. Error telemetry (Sentry)

Vellora uses Sentry (sentry.io) to collect anonymous error reports that help us fix bugs. Sentry is a service operated by Functional Software, Inc., headquartered in the United States, and complies with EU privacy regulations (GDPR) via Standard Contractual Clauses (SCCs).

When the app encounters an unexpected error, the following information is sent to Sentry:

• Device technical information: model, manufacturer, Android version, system language.
• Installed Vellora version.
• Technical error details: exception type, function where it occurred, affected source lines (stack trace).
• Recent user actions before the error (breadcrumbs): button taps, screen transitions, player events. These do not include credentials, personal URLs, or titles you watched.

Information that is NEVER sent to Sentry:

• Your username, password, or access tokens.
• The URL or IP address of your personal Emby server (automatically stripped from the report before sending).
• Your unique device identifier (DeviceId).
• Your playback session identifier (PlaySessionId).
• The name of any content you played or viewed.
• Any data that could personally identify you.

This data is retained by Sentry for a maximum of 90 days and is used exclusively to diagnose and fix technical issues. It is not shared with third parties and is not used for commercial or advertising purposes.

Sentry's privacy policy: https://sentry.io/privacy/

If you do not want these anonymous reports to be sent, you can uninstall the application. A future version is planned to include a settings toggle to opt out of telemetry.

6. Emby Connect

If you choose to log in with Emby Connect, the app communicates with https://connect.emby.media, a service operated by Emby LLC, for the following purposes:

• Request and validate a PIN code to link your Emby Connect account with the app.
• Retrieve the list of Emby servers linked to your Emby Connect account.
• Request an access token for the server you select.

Use of Emby Connect is subject to the privacy policy and terms of service of Emby LLC. Vellora has no control over and is not responsible for data processing by Emby LLC.

7. Device permissions

Vellora requests the following Android permissions, all required for its core functionality:

• Internet (INTERNET): to connect to your Emby server and to Emby Connect.
• Network state (ACCESS_NETWORK_STATE): to detect if a connection is available and adjust playback quality.
• Wake lock (WAKE_LOCK): to prevent the screen from turning off during playback.
• Foreground service (FOREGROUND_SERVICE, FOREGROUND_SERVICE_MEDIA_PLAYBACK): to keep audio playback running in the background and show controls in the notification bar.
• Notifications (POST_NOTIFICATIONS): to display playback controls.
• Bluetooth (BLUETOOTH, BLUETOOTH_CONNECT): so Bluetooth headphones can control playback (play/pause, next).

The app does not request access to your camera, microphone, contacts, location, photos, personal files, or other sensitive data.

8. Data security

Your Emby server credentials and session tokens are stored in Android's app-private storage system (SharedPreferences). This storage is only accessible by the Vellora app itself and is not encrypted beyond the operating system's default protection.

If your Emby server uses HTTPS, all communications between Vellora and the server will be encrypted. If your server uses plain HTTP, communications will not be encrypted; we always recommend setting up HTTPS on your server.

Communications with connect.emby.media always use HTTPS.

9. Data deletion

Because Vellora does not store data on its own servers, there is no "Vellora account" to delete. All data the app processes is stored exclusively on your device and you can remove it at any time, without contacting the developers, using any of the following methods:

• Sign out from within the app: this clears stored credentials, the session token, and the device identifier. The app returns to its initial state.
• Clear the app's storage from system settings: go to Settings → Apps → Vellora → Storage → Clear Data. This removes all locally stored information, including preferences and cache.
• Uninstall the app: uninstalling Vellora removes all data stored locally by the app.

Deleting your Emby server account: the account you sign in with belongs to the Emby server you connect to, not to Vellora. To delete it you must use the Emby server's administration interface or contact the administrator of that server. Vellora does not have access to that account and cannot delete it on your behalf.

Deleting Emby Connect data: if you used Emby Connect to sign in, the data associated with your Emby Connect account is managed directly by Emby LLC. To request deletion of data held by Emby Connect, please refer to the Emby LLC policy.

If you have any questions about the data deletion process, you can contact us at velloradeveloper@outlook.com.

10. Children

Vellora is not specifically directed at children under 13 and does not knowingly collect data from children. Content suitability for minors depends on the configuration of the Emby server the app connects to. Parents or guardians can configure age restrictions on their Emby server (Settings → Users → Parental Control).

11. Changes to this policy

We may update this privacy policy occasionally. The "Last updated" date at the top of the page indicates when it was last modified. Changes take effect when published on this page.

12. Contact

If you have questions about this privacy policy or about data handling in Vellora, you can contact us at:

Email: velloradeveloper@outlook.com