Everything you watch,
in one calm place.
Movies, series and live TV, brought together by add-ons you choose and played in a native 4K player.
Your library lives on your device, and it stays yours.
No account required. Windows today, macOS and Linux coming.
Install Rillio
One signed installer, free and open source. No account, no setup wizard.
Plug in add-ons
Rillio ships empty. Choose the catalogs and sources you want from the community add-on directory, or write your own.
Press play
Discover, organize and watch in one library that lives on your device.
One app for all of it
Discover, organize and watch from any source, held together by an open add-on ecosystem.
Open add-ons
Catalogs, subtitles and streams come from third-party add-ons you choose to install, browsable at the community directory. Nothing is bundled, and Rillio itself hosts no content, it is the player and the shelf.
4K HDR and Dolby Vision, in the app
- Stremio hands these streams to an external player
-
VLC skips their Dolby Vision metadata
VLC's pipeline does not process the Dolby Vision RPU metadata in these streams, so playback falls back to the base layer. Rillio renders through mpv and libplacebo, whose open-source implementation applies it. Rillio is not Dolby certified and does not claim to be.
- Rillio plays them natively, right in the app
HDR passthrough on HDR displays, and Dolby Vision metadata processed in-app through mpv and libplacebo, with no fallback to SDR. Exact output depends on your stream, GPU and display.
The right stream, picked for you
Rillio reads every source and surfaces the best of each quality tier, tuned to your screen and your language. One press of Watch plays the right one, and the full list is a tap away.
A player that gets the details right
Hover-preview thumbnails, chapter markers, skip intro, smart track selection. The small things a great player gets right, in the app.
Sync through Stremio, if you want
Your account is local. Optionally connect a Stremio account as a sync service: your library and add-ons stay in sync across devices, both ways, and Rillio shows you exactly what will move before it does. Disconnect anytime, everything stays on your device.
One device, many profiles
Create as many local profiles as you like and switch in two clicks. Each keeps its own library, history and settings, all on this machine.
Your account is a code
The whole library exports as a single code you can copy or scan. Paste it on another device and keep watching, with no cloud in between.
Your watchlist is not a product
No tracking, no ads, no data business. Here is what that means in practice, and where it stops.
Local-first, no account
Your library and history live on your device, not on someone else's server. Stremio sync is optional and additive: connect it if you want cross-device sync, and disconnecting keeps everything local.
Encrypted DNS
Name lookups go out over DNS-over-HTTPS, not in plaintext to whoever is listening.
No open ports
Rillio does not open inbound ports or forward them through your router, so your machine is never left listening for connections.
Downloads stay in their box
Every file path a torrent declares must resolve inside Rillio's own cache folder; a path reaching for anywhere else is rejected and the torrent thrown out. See the threat model for why that matters.
No ads, no tracking
No trackers, no telemetry by default, nothing between you and what you came to watch.
Memory-safe engine
The torrent engine and parsers are Rust, which removes the buffer-overflow class behind real client takeovers. Not immunity, but the most common exploit class is deleted outright.
Auditable
An open-source Rust engine you can read and verify, running locally, not a black box.
Signed updates
Every update is cryptographically signed and verified before it installs.
Where it stops. Some add-ons stream peer-to-peer, and peers on those networks can see your IP address. Rillio does not hide that, and honestly no app can without a VPN. If it matters to you, route Rillio through your own VPN or SOCKS5 proxy.
The threat model, in the open
Media players and torrent engines parse input from strangers by definition. Here is what actually matters today, with an honest status on each, and then the whole species of historical exploits this design is simply immune to.
Executables disguised as media
By far the most common real-world way people get infected from downloads: a fake installer, a "codec pack", or an executable renamed to look like a video, hoping you double-click it.
CoveredLike any true media player, Rillio simply can't be hit by this: it only demuxes media, it never runs a download. The classes where Rillio goes further than the norm are below.
Malicious media hitting the decoder
Crafted video, audio or embedded subtitles that exploit the shared native decode libraries (ffmpeg / libplacebo) every player embeds, ours included. A steady stream of CVEs, industry-wide.
Not yetThis is our honest open gap: decoding is not yet sandboxed away from the app. We track upstream mpv/ffmpeg fixes closely, and process-isolating the decoder is on the roadmap.
Peers can see your IP
On peer-to-peer networks, peers exchange IP addresses by design. No client can hide this on its own, and any that claims to is not being straight with you.
By design · bring a VPNPrivacy-conscious defaults (no inbound port, no UPnP, encrypted DNS), and we say plainly that IP privacy needs your own VPN or SOCKS5 proxy.
Safe against the species
Each of these is a real, documented CVE, patched long ago in its own product. They are here as specimens: Rillio's architecture rules out the entire class, so the species cannot recur here, whatever new specimen appears.
Torrents escaping the download folder
Crafted file names writing outside the download directory, into startup folders and worse. Specimen: libtorrent (2014), still recurring in Deluge (2025).
Parser memory corruption to code execution
A malformed torrent or peer message overflows a hand-written parser and runs attacker code. Specimen: uTorrent CVE-2020-8437.
Poisoned subtitle files, auto-fetched
Malicious subtitles pushed up a repository's rankings so the player downloads and parses them with no user action. Specimen: Check Point "Hacked in Translation" (2017), ~200M installs exposed.
Websites driving the local engine
A web page in your browser calls 127.0.0.1 to control your client or read files through it. Specimen: the Deluge (2025) unauthenticated file read.
Update-channel tampering
A hijacked updater turns one trusted app into a malware delivery network in a single push. Specimen: the CCleaner supply-chain attack (2017), ~2.3M machines.
Every specimen links to its primary source. These bugs are patched in their own products; they are here because they define the classes this software must be built to exclude. No software is invulnerable, including this one, so the code is open for audit.
Questions, answered plainly
Do I need an account?
No. Rillio works fully anonymously from the first launch, and you can create multiple local profiles on one machine, each with its own library and settings. To move to another device, export a sync code and paste it there, or connect a Stremio account and let it sync.
Where does the content come from?
Rillio ships empty. It is a player and an organizer; catalogs and streams come from third-party add-ons that you choose to install, which you can browse at the community add-on directory. Rillio does not host, index or provide any media, and no add-ons are bundled. What you access through add-ons is your choice and your responsibility, so stick to sources you have the right to use.
Can I bring my Stremio library?
Yes. Connect your Stremio account and Rillio merges its library and add-ons with what you already have, keeps both in sync while connected, and shows you a live diff of what moves. Nothing depends on it: disconnect whenever you like and everything synced stays saved on your device.
Is it really free?
Yes. Rillio is free software under the GPL, with no tiers, no ads and no data business. Every line of it is on GitHub for you to read, build and verify.