Privacy Policy

In short: the CoverDrift app reads your music directly from the sources you choose. Your music and credentials are not sent to us. If you voluntarily send feedback, we receive your message and reply email address as explained in §6a.

1 · Who we are

This policy explains how the CoverDrift app for Google TV / Android TV (the “App”), this website and optional feedback handle data. The controller responsible under the Swiss Federal Act on Data Protection (FADP/revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR) is Markus Heiniger (aibrain71), Switzerland.

2 · What data the App handles, and where it goes

The App has no backend. Data is processed on your device or sent directly from your device to the third parties you connect to.

The App requests read-only access to your files (Files.Read). It cannot modify or delete your cloud content.

3 · What we do NOT do

• The App does not send your music or credentials to a server of ours. Optional feedback is handled separately as described in §6a.
• The App does not collect analytics or use tracking/advertising SDKs. Our website counts page visits in aggregate only — see §6.
• We do not sell your personal data. Feedback uses only the hosting and email services described in §6a.
• We do not create an account with us — you sign in to your existing Microsoft account.

4 · Legal bases (GDPR, where applicable)

Processing is necessary to perform the contract with you and provide the App's core function (Art. 6(1)(b) GDPR). Under the Swiss FADP, processing is limited to what is necessary to provide the service you request.

5 · Third-party services

The App interacts directly with Microsoft (OneDrive / Microsoft Graph) for sign-in and your files, and with Deezer and Apple for cover/metadata lookup. These parties process data under their own privacy policies, which we do not control:

• Microsoft privacy
• Deezer privacy
• Apple privacy

6 · Website visitor statistics

This website counts how many times its pages are opened, so we can tell whether anyone is finding CoverDrift. The counter runs on our own server. It does not use cookies, does not store your IP address, does not create a profile, and sends nothing to any third party — there is no Google Analytics, no advertising pixel and no external script involved.

What is stored is a set of counters, and nothing else:

• the number of page views per hour;
• an approximate number of distinct visitors per hour;
• which page was opened (for example /index.html);
• the website you arrived from, as a domain name only (for example google.com) — never the full address.

To count visitors rather than page loads, a short one-way fingerprint is derived from your browser identification and network address using a secret that we replace every day. It is used only to decide whether you have already been counted in the current hour, and it is deleted when that hour ends. It cannot be linked back to you, and it cannot be matched across days.

Because no information is stored on your device and no personal data is retained, this counting requires no consent banner under the EU ePrivacy Directive or the Swiss FADP. Legal basis, to the extent any applies: our legitimate interest in knowing whether our own website is being read (Art. 6(1)(f) GDPR). Counters are kept for 90 days and then discarded.

The CoverDrift app itself measures nothing at all — no usage statistics, no crash analytics beyond what Google Play collects on its own terms, and no communication with any server of ours.

6a · Optional feedback and support email

You can send an idea, report a problem or ask a question without creating an account. The form sends your chosen topic, message and reply email address to Markus Heiniger at aibrain71@gmail.com so we can handle your request and reply. Do not include passwords, payment details or other sensitive information.

The form is hosted by Hostinger and the correspondence is received in Google Gmail. These providers process the information needed to transmit and store the email and may process data outside Switzerland, including in the United States. See Hostinger privacy and Google privacy.

The form does not create a user profile or store messages in a website database. A necessary session cookie protects the form against forged submissions and abuse; its session contains a security token and send timing, not your message or email address. Hosting connection logs may contain technical access information for operation and security.

We use your correspondence to answer and follow up on your request, not for launch notifications or marketing. Where the GDPR applies, the basis is our legitimate interest in responding to requests (Art. 6(1)(f)), or taking steps at your request concerning an agreement (Art. 6(1)(b)). Correspondence remains in the support inbox only while needed for this purpose or applicable retention duties. You may request access or deletion by emailing the address above.

7 · Retention and deletion

Tokens and caches are stored only on your device. Remove them any time by signing out in the App (clears the tokens) or uninstalling the App (removes all App data). You can also revoke the App's access from your Microsoft account security settings. We do not hold your App library or credentials. Feedback correspondence is handled separately under §6a.

8 · Security

OAuth tokens are stored encrypted at rest using Android Keystore-backed EncryptedSharedPreferences. All network communication uses HTTPS/TLS. No system is perfectly secure, but the App minimizes risk by keeping App data on the device. The separate feedback form sends only what you choose to submit.

9 · Children

The App is intended for a general audience and is not directed at children. We do not knowingly process children's data.

10 · International users

The App is offered internationally (including the USA, Europe, Asia, and Switzerland). Because processing happens on your device and directly with the services you choose, your data is handled by those services in the regions they operate. The controller is established in Switzerland.

11 · Your rights

Subject to applicable law (FADP / GDPR / your local law), you have rights to access, rectification, erasure, restriction, objection, and data portability. For App data, these rights mainly concern data on your device or held by the services you choose. For feedback correspondence or other privacy questions, contact us at aibrain71 [at] gmail [dot] com. You may also lodge a complaint with your competent data-protection authority (in Switzerland: the FDPIC).

12 · Changes

We may update this policy. Material changes will be posted at this URL with a new effective date.

13 · Contact

Markus Heiniger (aibrain71) · Hauptstrasse 1, 5603 Staufen, Switzerland · aibrain71 [at] gmail [dot] com