What leaves your device,
and when.

What stays on the device

• Your media, your library, your artwork, your resume points and your settings.
• Credentials for network shares, stored on the device and used only to reach the share you entered them for.
• Your playback history and the library index, written to this device's own storage.

When Vunio talks to the network

• Your own servers. Whatever SMB, NFS, SFTP, FTP or WebDAV share you connect to. That traffic goes to your server, not to us.
• Subtitle search — opensubtitles.com and assrt.net. When you search, or when you have turned automatic fetching on, Vunio sends the title, a content hash and the size of the file, and your preferred subtitle languages. It does not send the file.
• Artwork and metadata — themoviedb.org. When library scraping is on, Vunio sends the title it is trying to identify.
• Trakt — api.trakt.tv. Only if you connect a Trakt account yourself, in which case what you watch is sent to Trakt by your instruction.
• iCloud — your own account, and on by default. Playback positions are copied to your private iCloud key-value storage, so a film started on one device can be finished on another. What travels is the position and what identifies the item — not the file, and not the video. It goes to Apple's storage under your Apple Account, never to us. Nothing is synced for a private session, for files excluded from history, or while remembering positions is off, and the whole thing can be switched off in Settings → History → Sync playback position across my devices.
• Website analytics — Cloudflare Web Analytics. A small Cloudflare beacon on this website measures aggregate page views and site performance. Cloudflare says Web Analytics does not collect or use visitors' personal data. This measurement is for the website, not the Vunio app.
• Crash and performance diagnostics — Sentry. When Vunio crashes or encounters an unhandled error, it may send a diagnostic report with a stack trace and basic app, device and version context. Sentry also receives a sample of performance measurements, such as startup and playback preparation times, so slow or failed playback can be investigated. Production performance traces use a 10% sample rate. These reports exclude media titles, media URLs, subtitle text and network-share credentials.
• App usage statistics — Firebase Analytics. The app records installation and session events, fixed feature categories, and measurements such as startup and playback preparation duration. Firebase uses an app-instance identifier, app and device metadata, and approximate geography derived from IP addresses. Events can be associated with that installation identifier, so these statistics are not described as fully anonymous. Advertising-identifier collection and advertising consent categories are disabled. Media titles, media URLs, subtitle text, library contents and network-share credentials are not sent to Firebase Analytics.

Diagnostics

Sentry receives limited crash diagnostics and sampled performance traces. Default personal-information collection, network breadcrumbs, failed-request capture, screenshots, view hierarchies and session replay are disabled. Firebase Analytics caches events locally and can upload them in batches; disabling automatic screen reporting does not disable installation and session measurements.

Vunio also keeps diagnostic logs in a folder on this device. On macOS, Help → Export Diagnostic Logs… saves a copy wherever you choose and Reveal Log Folder opens it in the Finder. If you decide to email one in, that is you sending a file you have already seen, by hand.

What there is none of

• No session replay. App performance measurements are sampled; website analytics is limited to Cloudflare's aggregate page-view and performance measurements.
• No advertising, and no advertising identifiers.
• No account, and no sign-in for the app itself.
• No media files, media titles, media URLs, subtitle text, library contents, playback-history records or network-share credentials sent to Sentry or Firebase Analytics. Fixed feature events, such as playback becoming ready, are included in app statistics.

Questions

ws.software@outlook.com