PixelPlayerOSS is local-first and does not include analytics, advertising SDKs, Firebase, Crashlytics, or Google Play Services runtime dependencies.
The app stores music library metadata, playlists, favorites, lyrics, preferences, playback state, artwork cache, and optional backup/restore data on the device.
Network features are optional and user-controlled:
- Navidrome/Subsonic and Jellyfin are used only after the user signs in to a self-hosted server. Those servers may receive the authentication, library, playback state, and play history requests needed for their protocols.
- LRCLIB lyric lookup is used only when online lyrics are enabled.
- Deezer artist artwork lookup is used only when online artist images are enabled.
- PixelPlayerOSS does not submit listening activity to public scrobbling services such as ListenBrainz or Last.fm.
Server credentials and preferences are stored locally. The app does not sell or share user data.
PixelPlayerOSS requests media/file permissions to scan and play local music, read artwork, edit metadata, and export/import user backups.
The app keeps crash logs locally for troubleshooting. It does not automatically upload crash reports.
Open a GitHub issue for privacy questions that do not contain sensitive personal data.