Privacy Policy
This page explains the data Veloflix collects, why it is needed, and what choices you have. We follow a minimum-data approach: the only information we store is the data that keeps account features — sign-in, My List, Continue Watching — working correctly. We do not sell, rent, or trade user data.
Last updated · June 17, 2026
When you create a Veloflix account we store the email address you register with, a credential hash, and the session metadata needed to keep you signed in. The profile page reads this account record to display your handle, avatar, and library.
My List entries and Continue Watching rows are saved against your account, not your device. We record the TMDB id, media type, last known position, and a timestamp so the resume and remove actions on the profile page can stay in sync.
The interface language (English or Indonesian) is stored in a cookie and in localStorage so the choice follows you across sessions. The avatar crop preview is also stored locally on your device and is not uploaded to our servers.
Veloflix uses signed, HTTP-only session cookies managed by NextAuth. These cookies keep you signed in, protect account-only endpoints, and expire automatically when you sign out. We do not run third-party advertising cookies on the platform.
Standard infrastructure logs are kept for a short rolling window to monitor abuse, debug incidents, and protect the platform. Logs are never sold, never shared with advertisers, and only retained as long as operationally required.
The footer and the Contact page link to Telegram, Instagram, Threads, X, and TikTok. Once you open those platforms, their own privacy policies and terms apply. Veloflix does not receive messages you send them unless you contact us directly.
You can remove individual titles from My List or Continue Watching at any time. Account deletion requests are honoured within seven days; reply to any email we send you or message Telegram with the account email to start the process.
Veloflix is intended for viewers aged 13 and above. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will remove the record.
We may update this policy to reflect new features, legal requirements, or operational changes. Material updates will be announced on the social channels linked in the footer before they take effect.
If anything in this policy is unclear, or if you want to exercise one of the rights described above, the fastest way to reach us is through the Contact page or the Telegram channel. We treat every privacy request as a priority and respond within two business days.