Privacy Policy
Last updated: October 14, 2026 · Version française
This page describes what PyxelPlayer keeps, what it does not keep, and what you can do about it. It is written to match exactly how the application works.
The principle
PyxelPlayer works on your device first. The catalogue, the programme guide and your downloaded content stay there: they are never sent to our servers. Without a signed-in account, the application exchanges nothing with us.
What we keep
| Data | Why |
|---|---|
| Email address and provider identifier (Google, Apple), or your address and an encrypted password | To identify your account and sign you back in |
| Names of your profiles and playlists | To find them unchanged on your other devices |
| Favourites, collections, playback progress (content identifiers and position in seconds) | To resume playback where you left off, on another screen |
| Credentials for your streaming services, encrypted | So you do not have to re-enter them on every new device |
| List of your devices (name, platform, last sign-in date) | So you can see where your account is used |
What we do not keep
- Your catalogue. The thousands of films, series and channels from your provider stay on your device.
- The programme guide. It is downloaded from your provider, directly by the application.
- Your downloaded files. They never leave your device.
- No usage telemetry attached to synchronisation: we do not build advertising profiles and we do not sell any data.
Your service credentials: what you should know
They are encrypted, and we hold the key. We say so plainly rather than leave you to guess: it means we are technically able to decrypt them.
This protection covers you against theft of our database, not against a compromise of our servers. It is the trade-off that leaves you a single password to remember — yours, with your identity provider.
In practice:
- the master key is not stored in the database;
- each record is encrypted with its own key, derived from your account: a leak of one does not open the others;
- decryption only happens on request, never when a list is displayed;
- if you do not wish to entrust these credentials to us, do not use synchronisation: the application works without it.
Retention period
Your data is kept for as long as your account exists. Deleting it permanently erases everything, within 30 days at most — see Delete my account.
Recipients
Your data is hosted by our infrastructure provider and is not passed on to any third party for commercial purposes. Payments are processed by Google Play and the App Store, or by Stripe for a card purchase on our website (plans intended for televisions). Each applies its own policy: we receive neither your card number nor your bank details.
When you buy by card, your account's email address is passed to Stripe to prefill the payment and send you the receipt. Stripe returns the subscription or payment identifier to us, which is used to keep your access up to date.
Your rights
Under the European General Data Protection Regulation (GDPR), you have the right of access, rectification, erasure, restriction, objection and portability. Write to contact@pyxelplayer.app; we reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority.
Children
The application is not intended for children under 13, and we do not knowingly collect their data.
Contact
Data controller: Pyxelgenius — contact@pyxelplayer.app