Privacy Policy

Last updated: 21 September 2026

The Vault is an app, not a streaming service. It plays media from a Jellyfin server you already have access to — your own, or one someone has given you an account on. It comes with no movies or television of its own, and there is no Vault account to create. This page explains, in plain terms, what the app does with information, based on how it is actually built rather than on a generic template.

Who holds your information

This is the part most worth understanding. The Vault signs you in to the server you chose, and that server is what holds your library, your playback history and your account. The people who make The Vault do not receive any of it. The app sends your credentials and playback activity to the address you typed in and nowhere else.

If the server you connect to is run by someone else, their handling of your data is between you and them — this policy cannot speak for a server it does not operate.

There is no anonymous or guest access: you need an account on a Jellyfin server before the app can show you anything.

Passwords and sessions

Your password is used to sign you in. The Roku app does not intentionally keep your password after authentication — what it retains is the access token the sign-in produces, stored in the Roku channel's own private per-user storage on your device, so you are not asked to sign in every time you open the app.

If you choose the option to save credentials on the sign-in screen, that choice is yours and is handled by the app's sign-in flow. Signing out clears the stored session on that device.

What stays on your device

On the Roku itself, the app keeps only what it needs to work: the access token your sign-in produced, the server address you entered, and your own display preferences. These live in the Roku channel's private per-user storage on that device. Signing out clears the session on it.

The app contains no analytics, no advertising identifiers and no third-party tracking. It does not phone home: there is no server belonging to The Vault's authors for it to report to.

What your server processes

A Jellyfin server — whoever runs it — necessarily handles information including:

• Account and authorization data — who you are and what you are permitted to do.
• Playback activity — what was played and how far through it you got, so resume and "continue watching" work.
• Requests — titles requested, the seasons and quality chosen, and the status of each request.
• Library activity — additions and permitted removals.
• Storage and quota accounting — how much space your account's media occupies, so limits can be applied fairly.
• Security and audit records — a server-side record of significant actions, including access denials and removals.

We would rather be accurate than flattering: a media server plainly does hold information about your use of it, and saying otherwise would be false. What is true is that this information lives on your server rather than with the app's authors.

The last three items — requests, library activity and storage accounting — only exist where the server also runs the optional Vault backend, which adds request and storage features. Against a plain Jellyfin server the app detects that those features are absent and hides them; no such data exists.

What it is used for

On the server, this information is used to operate it and keep it secure — signing you in, playing media, tracking requests, applying storage limits, and investigating problems or misuse. It is not used to build advertising profiles, and it is never sold.

Artwork and catalogue data

To show posters, backdrops and details for titles you can request, the app loads artwork and catalogue information from the media server and from a third-party movie/TV metadata image service. Those requests are made to display the catalogue; they are not used to identify you to anyone.

Separation between accounts

The Vault is designed so that one account is not shown another account's private administrative information. Storage figures, requests and management actions are scoped to the account making them. Some things are shared by nature — a title in a shared library is visible to the people who have access to that library, and removing shared media will affect the other people who could watch it. The app tells you when that is the case before you confirm.

Retention

Account, playback, request and quota information is kept for as long as it is needed to run the service. Server-side audit and security records may be retained after the related media or request is gone, because their purpose is to provide an accurate history of what happened.

Sharing

Information is not sold, and is not shared for advertising purposes. The Vault runs on infrastructure and platforms operated by others — including Roku for the device and channel platform, and internet and network providers carrying the traffic. Those companies handle data according to their own policies, which are outside The Vault's control.

Your questions

For questions about your account, your access, or the information the service holds about you, please contact us through the support page.

Changes

The Vault is actively developed, and this policy may be updated as the service changes. The "last updated" date above will change when it does.