ACE Global Pro · ACE Aria Media Player
Last updated: 2026-08-11
ACE Aria Media Player ("Aria") is a media player that runs on your Mac. This
policy describes exactly what it does with your data. It is written to be
checked against the software's actual behaviour, not to be broad enough to
excuse anything.
Aria has no servers. We operate no account system, no analytics, no telemetry,
and no crash reporting. Nothing about you, your files, or your listening is
sent to ACE Global Pro, because there is nowhere for it to be sent.
All of the following is stored locally and never transmitted:
| Data | Where it lives |
|---|---|
| Your media library index (paths, tags, ratings, play counts) | ~/Library/Application Support/ACE Aria/ (SQLite) |
| Bookmarks and resume positions | Application Support |
| Playlists and saved queues | Application Support |
| Play history | Application Support |
| Radio station list | Application Support |
| Effects and app preferences | macOS user defaults |
| Secure Vault password | macOS Keychain |
| Phone pairing tokens | macOS Keychain |
| OpenSubtitles key and session token | User defaults / Keychain |
Your media files are never copied, uploaded, or moved except where you
explicitly ask for it (Convert, Trim, Join, and moving files into the Secure
Vault). Aria reads the folders you choose and leaves your files where they are.
Aria makes network requests in five situations, all of them user-initiated:
1. Downloading ffmpeg (first time you play a format macOS can't decode).
A download from the pinned tool source. No data about you is sent.
2. Subtitle search (only if you supply your own OpenSubtitles key). Aria
sends the file name, and a hash computed from the file's size and its first
and last 64 KB, to api.opensubtitles.com in order to find matching
subtitles. Your file itself is never uploaded. This feature is off unless
you enter a key.
3. Internet radio (only stations you add). Aria connects directly to the
stream URL you provided. The station operator sees your IP address, exactly
as any radio app or browser would.
4. Serving to your phone or iPad (off by default). Aria runs a local HTTP
server on your own network. Traffic goes from your Mac to your device and
nowhere else.
5. Opening links you click — the ACE website, the Tailscale download page —
in your browser.
There is no background activity. Aria does not "phone home" on launch or on
any schedule.
The Secure Vault is a standard macOS AES-256 encrypted sparse bundle on a disk
you choose. Its password is generated on your Mac and stored in your Keychain.
We cannot recover it. There is no back door, no escrow, and no reset. If
you lose both the password and your Keychain, the contents are permanently
unreadable. Use Settings → Export Recovery Card and keep an offline copy of the
password.
Secure Mode uses Touch ID through Apple's LocalAuthentication framework. Aria
receives only a yes-or-no answer. Your fingerprint data never leaves the Secure
Enclave and is never accessible to Aria.
When you turn on Phone & iPad sharing:
Vault and every secure folder are refused at the path level, before any root
is considered — not by a setting you could accidentally change.
such as Tailscale. Aria offers no route to the public internet, deliberately.
Your licence key is validated on your Mac and stored locally. Aria does not
transmit it.
Aria is not directed at children and collects no personal information from
anyone, including children.
Because Aria collects nothing, there is no personal data of yours for us to
provide, correct, or delete. Data Aria stores locally is yours: delete
~/Library/Application Support/ACE Aria/ and the Keychain items to remove it.
Note that deleting the vault password makes the vault unreadable.
Material changes to this policy will be noted in the app's release notes and
reflected in the "Last updated" date above.
hello@aceglobalpro.com — ACE Global Pro