Privacy Policy

What the apps collect

Nothing. Loxley Labs apps do not collect, transmit, sell, or share any personal information. We have no analytics SDKs, no advertising SDKs, no crash-reporting services, and no user accounts. We never see how you use the apps.

Data stays on your device

Anything an app saves (your notes, recordings, saved passwords, preferences, history) is stored only in that app's private storage on your device. It is never uploaded anywhere. If you uninstall an app, that data is removed with it.

• Quick Notes keeps notes in a local database on your device.
• Password Generator's optional vault is encrypted on your device (AES-256) with a master password you choose; the key never leaves your device and we cannot recover it.
• Sound Level Meter only records audio when you tap Record, and saves it on your device.
• QR & Barcode Scanner processes the camera image live on-device to read a code; frames are never stored or sent.

Permissions

Most Loxley apps request no permissions at all. The few that do use them only for the feature you asked for, entirely on-device:

• Camera: to scan codes (QR & Barcode Scanner).
• Microphone: to measure/record sound (Sound Level Meter).
• Notifications / alarms: to ring a timer (Stopwatch & Timer).
• Motion sensors: to show heading/level (Compass & Level).
• Network: to reach your own PC on your own wifi (Loxley Map for Minecraft), and for one optional lookup (Meal & Fasting Planner).

No app requests location or contacts. Two apps ask for network access, and neither sends anything about you anywhere: the Meal & Fasting Planner, for its optional barcode lookup, and Loxley Map for Minecraft, which only ever talks to your own PC on your own wifi. Every other app has no network access at all.

The Meal & Fasting Planner's barcode lookup

The Loxley Meal & Fasting Planner is the one Loxley app that reaches the public internet, and only for a single optional feature that is off by default. If you turn on its barcode scanner and scan a product, the app sends only that barcode number to Open Food Facts, a public food database, and gets back nutrition figures. It sends nothing else and no personal data. No other Loxley app sends anything to the internet at all. Full detail is in the Planner's own policy at loxleylabs.net/privacy/planner.

Loxley Map for Minecraft and your own network

Loxley Map for Minecraft draws a live map of a Minecraft world you are playing on your own PC. To do that, the app has to talk to that PC, which is why it asks for network access. It never reaches the internet.

What it actually does: it looks for the free Loxley Map mod on your own wifi by trying addresses on your own network until one answers, then asks that PC about the part of the world you are looking at. That traffic goes from your phone to your PC and stops there. No Loxley server is involved at any point. Nothing about your world, your seed, your builds, your position or how long you play is ever sent to us or to anyone else, and there is no mechanism in the app by which it could be.

The map it has drawn is kept in the app's private storage on your phone so it can still show you where you have been while the PC is off. Uninstalling the app deletes it. No account, no sign-in, no analytics, no ads, no in-app purchases.

Signing in to download apps from this website

To download an app's install file from loxleylabs.net, we ask you to sign in. This is only to keep downloads fair (5 downloads per app per day) and to stop bots from bulk-scraping the files. It's not used for advertising, profiling, or tracking, and the apps themselves still need no account.

There are two ways in, and you do not need a Google account. You can continue with Google, or you can give any email address and we will send you a six-digit code. Both end at the same place: a scrambled, one-way token that is your record here.

What our server keeps: your Google account's ID, stored only as a scrambled, one-way token (a keyed hash; we never store the raw Google ID), used as your record for the per-app daily download limit and for any purchases you make; plus a count of how many times you've downloaded each app on a given day. That is the entire record: no email, no name, no list of what you downloaded beyond that day's count. If you ever buy a paid app, the payment itself is handled by the payment provider; we never see or store your card details.

If you sign in with an email address instead: we send a six-digit code to that address to check it is yours, and the code is thrown away as soon as you use it. The address is put through the same one-way scrambling and it is the scrambled result we keep, never the address itself. We cannot read it back, we cannot email you again from it, and we could not tell you which addresses have ever signed in. The part before the @ is kept in the session cookie in your own browser so the page can greet you; it is not stored on our servers.

What we do not store: your name and profile photo (shown at the top of the page while you're signed in) come straight from your Google sign-in and live only in a session cookie in your own browser. We never save them on our servers. We never receive your Google password.

Support messages: to reduce spam, the support form requires you to be signed in. A message you send is stored with your scrambled ID (so we can match it to a purchase if you ask about one) and an optional reply-to email you choose to include. Nothing more.

You can sign out at any time from the top of the page, which clears that session. We use Google's standard sign-in (OpenID Connect) and request only the basic name, email, and profile scope.