Privacy Policy

Information we use

When you browse as a guest, we assign a guest identifier and an access session. The iOS app supports Sign in with Apple. We receive an Apple account identifier and, if you share it, your email address. Email sign-in on the website stores an email address and a salted password hash. We also store stories saved to My List, playback progress, completed episodes, and coin balances, unlocks, rewards, purchase transactions, and subscription status when applicable. If you contact support, we store your message, contact email, any screenshot you choose to attach, and account information needed to respond.

We record interactions such as opening a series, saving a story, viewing an upgrade screen, and continuing from the website to the app. Campaign links can associate your visit with a campaign and the story you came to watch. We also process performance and diagnostic information to understand loading times, playback failures, and other technical problems. Our hosting and delivery providers process technical connection information, including IP addresses, to deliver and protect the service.

How we use information

We use this information to authenticate you, remember your stories and progress, check access to premium episodes, continue a story across supported links, understand how the service is used, and detect abuse or technical problems. Campaign and story information can influence which stories we recommend.

Browser and device storage

The website uses browser session storage for your access session. The iOS app stores its session securely on your device and caches artwork locally to avoid downloading the same poster repeatedly. Cached artwork may remain on your device until the cache is cleared or the app is removed. Clearing browser storage or signing out can remove access to a guest session, but does not by itself delete information already stored on our servers.

Service providers

We use Railway for application and database hosting, content delivery providers for artwork and streaming, Adapty for purchase analytics and configuration, Amplitude for product analytics, and AppsFlyer for attribution and links. These services may process user and device identifiers, app interactions, campaign information, and purchase events to provide their services. These providers may receive connection information when your device requests their resources. Where Apple purchases are enabled, Apple processes payment information; VelaStory receives transaction and entitlement information rather than your payment card number.

Service information may be processed outside your country. This website currently has no third-party advertising pixels and does not sell personal information. If our practices change, we will update this policy and obtain consent where required.

Retention and your choices

Access sessions expire after 30 days. Expired session records and temporary playback access records are periodically removed. Account information, saved stories, viewing history, campaign records, and service analytics remain on our servers until removed; they do not have a fixed automatic deletion period.

You can remove individual stories from My List, sign out, or delete your account in Account → Delete Account. Deleting an account removes its service data and initiates deletion requests to our analytics providers. Provider requests are processed asynchronously. We retain the limited identifiers needed to finish and verify those requests; failed requests remain for follow-up rather than being treated as completed. Some purchase records may be retained to fulfil accounting, fraud prevention, or legal obligations. Depending on your location, you may have rights to access, correct, export, or delete your personal information, object to certain uses, or complain to your local data protection authority. Signing out or uninstalling the app is not an account deletion request.

Security and children

We use encrypted connections, hashed credentials, and server-side access checks. No system can guarantee absolute security. VelaStory is intended for adults aged 18 and over and is not designed for children. We do not knowingly collect personal information from children.

Changes

We may revise this policy as the service develops. The date above identifies the latest version. Material changes will be communicated through the service where required.

Contact

Operator

RL PLAST EMBALAGENS LTDA

Contact email

[email protected]