Legal
Privacy Policy
The short version
- Your music, videos and file names stay on your phone. We never upload them.
- You can use the whole app without an account. Nothing is gated behind signing in.
- If you choose to create an account, we store your email address and your library list — titles, artists and where a file came from — so it can sync to another device.
- The app shows one advertisement in the library list, served by Google AdMob, which uses your device's advertising ID.
- We do not sell your data. There is nobody to sell it to.
1. Who this is from
XPlusePlayer Cyberpunk ("the app") is published by ValleyLinks. You can reach us at xpluseplayer.info@valleylinks.net about anything on this page, including a request to delete your account and its data.
2. What stays on your device, always
The app is a player for files you already have. The following never leaves your phone:
- The audio and video files themselves, and any artwork embedded in them.
- Files you import from a cloud account. These are copied into your phone's own
Music/XPlusePlayerorMovies/XPlusePlayerfolder so they play offline and in other apps. They are not uploaded anywhere by us. - Audio you trim with the Audio Cutter. The cut is written on your device.
- Play counts, resume positions, favourites and the albums you build, while you are signed out.
3. What we collect, and only if you ask us to
Signing in is optional and exists for one reason: to sync your library list between your own devices. If you create an account, our server (hosted on Supabase) stores:
- Your email address, and a display name derived from it.
- An entry per item in your library: title, artist, duration, category, media type, and which source it came from ("Device", "Google Drive", and so on).
- A reference to where the file lives on your device. This is a path or content URI, not the file.
The names you give your own albums and video libraries are a separate, opt-in choice. They are uploaded only once you switch on Sync album & library names in Profile, which itself requires an account — the switch is off until you turn it on. Only the name, its type (album or library) and when you created it are sent; the tracks inside a collection never leave your device.
Row Level Security is enabled on our database, so a signed-in account can only ever read its own rows. If you never sign in, no account exists and nothing is sent.
4. Google Drive
There are two separate ways to bring in cloud files, and they behave differently:
- The system file picker (Import files / Import folder) works with Google Drive, OneDrive, Dropbox and anything else installed on your phone. It involves no sign-in with us and no access to your account — Android hands the app the single file you picked.
- Connect Google Drive asks for the
drive.readonlypermission so the app can list your Drive media and show your storage quota. The access token is held in memory only, is never written to disk, and is never sent to us. Disconnecting, or closing the app, discards it.
Signing in with Google uses your Google account to prove who you are. We receive your email address and a Google account identifier. We never receive your password.
5. Advertising
The app displays a single native advertisement inside the library list. It is served by Google AdMob, which may collect your device's advertising ID, coarse device and network information, and interaction with the ad, in order to select and measure it. AdMob's handling of that data is covered by Google's privacy policy. You can reset or delete your advertising ID at any time in Android under Settings → Privacy → Ads, and the app keeps working normally.
There are no interstitials, no rewarded ads and no ads during playback.
6. Artist images
To show a picture beside an artist's name, the app looks that artist's name up in Deezer's public catalogue and caches the image on your device. Only the artist name is sent, and only for artists in your library. No account, and nothing that identifies you, is involved.
7. Permissions the app asks for
| Permission | Why |
|---|---|
| Read music and audio Read videos | To find and play the media on your phone. This is the only permission the app cannot work without. |
| Modify storage (Android 9 and older only) | To save cloud imports and audio cuts into your public Music and Movies folders. |
| Internet, network state | Optional account sync, cloud imports, artist images and the advertisement. |
| Biometrics | Only if you switch on the app lock. Your fingerprint or face is checked by Android; the app never sees it. |
| Foreground service | To keep audio playing when the screen is off, with lock-screen controls. |
The app has no permission for your contacts, camera, microphone or location, and does not ask for one.
8. Keeping it secure
Your session tokens are stored in Android's encrypted preferences on your device. Traffic to our server uses HTTPS. That said, no system is perfect, and we will not pretend otherwise.
9. Children
The app is not directed at children under 13, and we do not knowingly collect anything from them. If you believe a child has created an account, email us and we will delete it.
10. Deleting your data
Signing out removes the session from your device. To delete the account itself and everything stored against it, email xpluseplayer.info@valleylinks.net from the address you signed up with. Uninstalling the app removes its local database; the media files in your Music and Movies folders are deliberately left alone, because they are yours.
11. Changes
If this policy changes in a way that affects what we collect, the date at the top will change and the new version will appear here and in the app. Continuing to use the app after that means you accept the update.
Questions: xpluseplayer.info@valleylinks.net · contac@valleylinks.net