Privacy Policy

Last updated: 24 October 2026

Overview #

Pixette is designed with your privacy in mind. I believe your photos are personal and should stay that way. This policy explains how Pixette handles your data.

Information #

Pixette does not collect or transmit to me or to any third party any user sensitive information, nor any of your pictures or videos. The app does not need any personal information and does not require any registration.

Mandatory and Optional Data #

No data is mandatory to use this application. It will function even without an internet connection, purely on your local network. Sources you reach over the internet, such as Google Photos or OneDrive, need a connection, and so does signing in to Plex.

Data I Don't Collect #

• No personal data collection. I do not collect your name, email, or any personal information. If you connect Google Photos or OneDrive, the account details listed in Google Photos and Microsoft OneDrive stay on your device.
• No user registration. Pixette does not require an account to use.
• No photo uploads. Your photos and videos are never uploaded anywhere. Pixette reads them directly from your NAS or photo server, or from Google Photos or OneDrive if you connect them.
• No IDFA usage. I do not request the iOS advertising identifier (IDFA).

Data Stored on Your Device #

Pixette stores the following data locally on your device only:

• Your NAS connection credentials (URL, username, password), stored in the app's secure local storage
• A cache of resized thumbnails for smooth slideshow performance
• Your slideshow preferences and settings
• If you connect Google Photos, the items listed in Google Photos below
• If you connect OneDrive, the items listed in Microsoft OneDrive below
• If you connect Jellyfin or Plex, the items listed in Jellyfin and Plex below

Sharing of Information #

Pixette does not share any data with third parties for advertising or marketing purposes. However, to improve the app, Pixette uses two third-party services:

• Sentry: for debugging and error tracking. Sentry Privacy Policy
• Firebase / Analytics: for anonymous usage statistics and performance monitoring. Firebase Privacy Policy

This data is not linked to your identity and does not include any of your photos or personal information.

Google Photos #

If you connect Google Photos, Pixette uses the Google Photos Ambient API to show your photos and videos on your frame.

What Pixette accesses.

• Only the photos and videos you choose for the frame in Google Photos (scope photosambient.mediaitems).
• Your Google account's basic profile (name, profile picture) and email address. They are used only to show which account is connected. On the frame, only your first name and a masked email address are displayed.

How it is used. Only to display the photos and videos you chose on your device. Pixette never uploads, edits, deletes or shares your Google Photos content. It never uses it for advertising, profiling or analytics. It does not use Google user data to develop, improve or train AI or machine learning models.

Where it is stored and for how long. On your device only. Pixette runs no server of its own. Google Photos data is never sent to Pixette, to analytics, to crash reporting, to RevenueCat or to any other third party. It is only transferred to Google's own services, as needed to provide the feature.

• Kept until you disconnect: the device ID, media item IDs, OAuth tokens (stored in the iOS or tvOS Keychain, or protected by the Android Keystore), the profile picture, first name and email address, the frame name and the names of the chosen albums.
• Photos and videos are cached on the device for at most 60 minutes, then deleted.

How to remove access. In the app, go to Settings > Google Photos > Disconnect Google Photos. This removes the frame from your Google account, revokes the token and deletes all Google Photos data on the device. You can also remove access at any time at https://myaccount.google.com/permissions.

Pixette's use and transfer of information received from Google APIs adheres to the Google Photos API User Data and Developer Policy, including the Limited Use requirements.

Microsoft OneDrive #

If you connect Microsoft OneDrive (beta), Pixette reads the photos and videos in the OneDrive folder you pick and shows them in your slideshow. Only personal Microsoft accounts are supported.

What Pixette accesses.

• Read-only access to your OneDrive files, through the Microsoft Graph permissions Files.Read and offline_access. Pixette lists the folder you pick and downloads its photos, videos and thumbnails for playback.
• The ID of your drive and the display name of the drive owner, used to show "Signed in as ...".

How sign-in works. Pixette uses Microsoft's device-code sign-in. The app shows a short code and a QR code, and you enter the code at microsoft.com/link on your phone or computer. No password is typed into Pixette.

How it is used. Only to display the photos and videos from the folder you chose on your device. Pixette never uploads, edits, deletes or shares your OneDrive files.

Where it is stored and for how long. On your device only. Pixette runs no server of its own. OneDrive data is never sent to analytics, to crash reporting, to RevenueCat or to any other third party. It is only transferred to Microsoft's own services, as needed to provide the feature.

• Kept until you sign out: the drive ID, the drive owner's display name and the OAuth tokens (stored in the iOS or tvOS Keychain, or protected by the Android Keystore).

How to remove access. In the app, open the OneDrive account step and choose Sign out. This deletes the tokens and the account data on the device. You can also remove access at any time at https://account.live.com/consent/Manage.

Jellyfin and Plex #

If you connect a Jellyfin server or a Plex Media Server (both in beta), Pixette reads the photos and videos in the libraries you pick and shows them in your slideshow. Access is read only: Pixette never uploads, edits, deletes or shares anything on your server.

Jellyfin. Pixette talks only to your own Jellyfin server. It stores the server URL, your user name and user ID, your password if you signed in with one, an API key if you entered one, and the access token the server returns. Signing out ends the session on the server and deletes the token on the device.

Plex. Signing in uses Plex's PIN sign-in: the app shows a short code and you enter it at plex.tv/link. No password is typed into Pixette. Pixette then asks plex.tv (a service of Plex, Inc.) for the list of your servers and their addresses, and from then on talks to the server you picked. Each request to Plex carries a random identifier created for this installation of Pixette, the app's name and version, and the platform, as Plex requires. If your server can only be reached through Plex's relay, the photos pass through Plex's relay service. Pixette stores the server's ID, name and address, your Plex account token and the server's access token.

Where it is stored and for how long. On your device only, until you sign out or remove the connection. Access tokens are kept in the iOS or tvOS Keychain, or protected by the Android Keystore; the server address, user name and password are kept with your other connection details. Pixette runs no server of its own, and this data is never sent to analytics, to crash reporting, to RevenueCat or to any other third party. A Plex sign-in is never sent from your phone to a TV. You can also remove Pixette's access to your Plex account at any time under Authorized Devices in your Plex account settings. See the Plex privacy policy.

Contact #

If you have any questions about this privacy policy, please contact me at [email protected].