xfinn collects no data.
The publisher of xfinn receives, stores and shares no data about you. The app only talks to the Jellyfin server you sign in to, and keeps your sign-in in your device’s Keychain. This website uses no cookies and no analytics.
Who we are
xfinn is published by Dorian Galiana. For any question about this policy, write to privacy@xfinn.app.
Data handled by the app
To work, the app keeps the following on your Apple TV, iPhone or iPad. None of it is sent to us.
| Data | Where it lives | How long |
|---|---|---|
| Your server address, user ID and access token | Keychain (encrypted), shared with the Top Shelf extension on Apple TV | Until you sign out or delete the app |
| Recently used servers | On the device | Until you remove them or delete the app |
| Preferred audio and subtitle languages, playback settings | On the device | Until you change them or delete the app |
| Posters and artwork | Temporary cache on the device | Cleared by the system as needed |
Your library, your watch history, favorites and playback progress stay on your Jellyfin server: xfinn reads and updates them there, the way any Jellyfin app does.
Local network
On first launch, xfinn asks for access to your local network. It uses it only to find the Jellyfin servers on your network and to connect to them. You can turn it off in Settings › Privacy & Security › Local Network and type your server’s address instead.
What we don’t do
- No xfinn account, no analytics, no advertising, no tracking.
- No third-party SDK sending data.
- No xfinn server between you and Jellyfin: we never see your media, your credentials or what you watch.
- No selling or sharing of data, since we hold none.
Your Jellyfin server
The data you browse and play is processed by whoever operates your Jellyfin server: you, or the person who invited you. Their own rules apply to it.
Crash reports
If you agreed to share analytics with app developers in your device settings, Apple may send us anonymized crash reports. This sharing is managed by Apple and can be turned off in Settings › Privacy & Security › Analytics & Improvements.
Deleting your data
Sign out in xfinn’s settings to erase your token from the device, and delete the app to remove everything else. To also revoke xfinn’s access on the server, remove the device in Jellyfin’s dashboard, under Devices.
This website
xfinn.app sets no cookies and loads nothing from other sites: fonts and images are served from this domain. The web server keeps standard access logs (IP address, page, browser) for security, for up to 14 days.
Children
xfinn collects no data from anyone, children included.
Changes to this policy
Any change will be published on this page with a new effective date. Should a future feature ever process data, this policy will be updated before it ships.
Your rights
Under the GDPR, you can write to privacy@xfinn.app with any question, or lodge a complaint with your data protection authority (in France, the CNIL, cnil.fr). Since we hold no data about you, there is nothing to export or delete on our side.