Privacy

Last updated 10 November 2026

This policy explains what AIOStreams keeps about you and why: on this site, on the instances its developer runs, such as aiostreams.viren070.me, and in its apps. Instances run by other people are covered by their owners, not by this policy; see other instances. “We” means the AIOStreams project and its developers.

Who is responsible

AIOStreams' developer runs this site and the instances listed as theirs on public instances, and is responsible for the data they keep. Send privacy questions and requests to contact@aiostreams.org.

This site

This site counts visits with Plausible, which runs on our own server, sets no cookies and doesn't identify you. Your browser remembers whether you chose the light or dark theme. The host that serves the site sees your IP address, as with any website.

Instances we run

AIOStreams doesn't ask for your name or email address. An instance keeps what it needs to work:

  • Your configuration, including the API keys and accounts in it, stored encrypted. Your password is stored only as a hash.
  • What you watch in the apps: your progress, watch history, favourites, ratings, watchlist and playlists, and the name and app version of each device you watch on, so they follow you between devices and Jellyfin apps.
  • Usage counts: how many requests each addon gets, how long they take and whether they fail. They're tied to a hash of your configuration's ID and the network part of your IP address (such as 203.0.113.x), never the full address.
  • Server logs, which record requests, including IP addresses, to keep the instance running and deal with abuse.
  • Reports from the apps, only when you send one with Report a problem: your device, the app's version, your note and the app's recent log. When a report reaches the developer from another instance, its passwords, tokens and configuration IDs are taken out first.
  • What you share through community features, such as formatters and templates, which other people and other instances can see. A hash of your configuration's ID and of your IP address is kept with it, to stop repeat likes and abuse.

We use this data to give you what you ask for, to keep the instances secure and working, which is in our legitimate interest, and to meet the law.

Who receives your data

  • The services in your configuration. To find streams, the instance sends your requests to your addons and services, with the API keys you gave for each. It also passes on your IP address, which debrid services need for working links, unless that addon goes through a proxy in your configuration.
  • Where you send playback. A stream plays from its source, which sees your IP address. If you choose another player, such as VLC, it receives the stream's link.
  • Hosting providers that run the servers for this site and our instances.

Those services handle your data under their own terms and policies. We don't sell your data or use it for advertising. We only share it as described here, when you ask us to, when the law requires it, or to protect people or the service.

The apps

The apps keep your settings, sign-ins and downloads on your device. They connect to the server you sign in to and to the sources its streams and subtitles come from, to YouTube for trailers, and, in the desktop and Android apps, to GitHub to check for new versions. They send a report only when you choose to.

Once a day, the apps also send usage statistics to Aptabase, which runs on our own server: that the app was used, the device's model and system, the app's version and your language. Aptabase works out your country and region from your IP address and doesn't keep the address. No ID is sent with them, so the counts can't be tied to you, your server or what you watch. The apps tell you before sending any, and you can turn it off in their settings, under About.

How long it's kept

  • Your configuration and what you watch: until you delete them, or the instance removes the configuration.
  • Usage counts: single requests for 7 days, and daily totals for 90.
  • Reports from the apps: 7 days.
  • Usage statistics from the apps: 5 years.
  • Server logs: only as long as needed to run and protect the instance.
  • What you share: while it's listed.

Deleting your data

Delete User, under Save & Install on the configure page, deletes your configuration along with what you've watched and your app reports. Logs and usage counts expire on their own, and copies may stay in backups for a limited time.

Deleting your configuration doesn't delete what the services you connected keep, such as a debrid service, Trakt or an addon. Ask them directly.

Security

Configurations are encrypted and passwords hashed, and instances are reached over HTTPS. No system is completely secure, though, and addons and services you add may protect your data less well, especially over plain HTTP. Never put passwords or API keys in a report or a message to us. If we learn of a breach, we'll work to contain it, and tell the people affected and the authorities where the law requires it.

Your rights

Depending on where you live, you may have the right to see, correct, export or delete your data, to object to how it's used, and to complain to your data protection authority. Email contact@aiostreams.org to ask. Since AIOStreams doesn't know your name or email address, we'll need to confirm which configuration is yours first, for example by you signing in to it.

Where it's processed

Our servers and the services you connect may be in another country from yours. Your local privacy rights still apply.

Children

AIOStreams isn't meant for children who can't agree to this without a parent's or guardian's permission. If you think a child has used it without that permission, email contact@aiostreams.org and we'll delete their data where appropriate.

Other instances

Instances run by other people use the same software, but their owners choose its settings and can see what it keeps. A self-hosted instance can, for example, keep a history of the streams it serves with each viewer's IP address. Ask an instance's owner how they handle your data.

Changes

We may update this policy when AIOStreams or the way it handles data changes. The date at the top shows when it last changed, and we'll announce bigger changes on this site.