Apps privacy policy — Les Arcanes de Cookie

Le Barde: Music Player — music player

Android app "Le Barde" (fr.arcanescookie.lebarde).

In short

Le Barde collects no personal data, shares none, and connects to no server. It is a 100% local music player: your audio files, favorites, playlists and settings stay on your device. The app contains no ads, no trackers, no analytics and no crash-reporting service.

Internet: only for the optional donation

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet.

Permissions used and why

Permission	Why
Access to audio files (`READ_MEDIA_AUDIO`, or `READ_EXTERNAL_STORAGE` before Android 13)	Play and display the music stored on your device (local music player). Files are neither copied nor transmitted.
Notifications (`POST_NOTIFICATIONS`)	Show the playback notification with previous / pause / next buttons and lock-screen access.
"Media playback" foreground service (`FOREGROUND_SERVICE`, `FOREGROUND_SERVICE_MEDIA_PLAYBACK`)	Keep playing music in the background with the screen off.
Wake lock (`WAKE_LOCK`)	Keep the device from sleeping while a local file is playing.

No other permission is requested: no location, no contacts, no microphone, no camera.

Data stored on your device

To work, the app stores locally: your favorites and playlists, the current play queue, your settings (theme, widget, equalizer…) and, if you import them, .lrc lyrics files. This data never leaves your device, unless you decide to export a backup or an M3U playlist to a location of your choice. It is deleted when you uninstall the app.

"Support the developer" button

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children.

Plume: Notes and Journal — Encrypted notes and diary, 100% private. No ads, no account. Arcanes Store version, no Google.

Android app "Plume" (fr.arcanescookie.plume).

In short

Plume collects no personal data, shares none, and connects to no server. Your notes, journal, tags and attachments stay on your device, encrypted. The app contains no ads, no trackers, no analytics and no crash-reporting service.

Internet: only for the optional donation

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet.

Permissions used and why

Permission	Why
Notifications (`POST_NOTIFICATIONS`)	Show the daily writing reminder, if you turn it on. Its text is neutral and never shows the content of your notes.
Run at startup (`RECEIVE_BOOT_COMPLETED`)	Reschedule the writing reminder after the phone restarts.
Biometrics (`USE_BIOMETRIC`)	Lock the app or locked notes with your fingerprint or face. Biometric data is handled solely by Android: the app never has access to it.

No other permission is requested: no location, no contacts, no microphone, no general file access. To add a photo, the app uses the system Camera app.

Data stored on your device

Notes, journal (with mood), titles, folders, tags, templates and attachments are stored locally. The database is encrypted (AES-256) with a key protected by Android's secure keystore; attachments and locked notes are additionally encrypted. This data never leaves your device, unless you decide to export (Markdown, PDF, JSON) or create an encrypted backup to a location of your choice. Please note: Markdown, PDF and JSON exports are plain files, your responsibility once exported. The app is not included in Android's automatic backups. Everything is deleted when you uninstall the app.

The backup code and the backup password are known only to you: the publisher cannot recover them. If you forget them, the locked notes or the backup concerned become permanently unreadable.

"Support the developer" button

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children.

Rituel: Habit Tracker — A calm habit tracker: streaks, reminders, widgets. No ads, no account. Arcanes Store version, no Google.

Android app "Rituel" (fr.arcanescookie.rituel).

In short

Rituel collects no personal data, shares none, and connects to no server. Your habits, reminders and history stay on your device. The app contains no ads, no trackers, no analytics and no crash-reporting service.

Internet: only for the optional donation

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet.

Permissions used and why

Permission	Why
Notifications (`POST_NOTIFICATIONS`)	Show your habit reminders, with a button to record the habit as done.
Run at startup (`RECEIVE_BOOT_COMPLETED`)	Reschedule your reminders after a phone restart, an app update, or a time or time-zone change.

No other permission is requested: no location, no contacts, no microphone, no camera, no file access.

Data stored on your device

Your habits, reminders, pause periods, completion history and settings are stored locally. This data never leaves your device, unless you decide to export (CSV or JSON) or create a backup to a location of your choice. The app is not included in Android's automatic backups. Everything is deleted when you uninstall the app.

"Support the developer" button

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children.

L'Athanor: Recipes — Recipes, pantry, shopping lists and timers. No ads, no account. Arcanes Store version, no Google.

Android app "L'Athanor" (fr.arcanescookie.chaudron).

In short

L'Athanor collects no personal data. Its only use of the Internet is, when you scan a product, to look up its details and community prices on Open Food Facts and Open Prices; only the barcode (and, for prices, your country) is sent. Your recipes, pantry, shopping lists and known barcodes stay on your device. The app contains no ads, no trackers, no analytics and no crash-reporting service.

Internet permission: one single use

For its own operation, the app declares the INTERNET permission for a single purpose (the optional donation is explained below): when you scan a barcode it does not know yet, it asks Open Food Facts (an open, collaborative database, ODbL licence) for the product's name, brand, size and ingredients to prefill the form. Only the barcode is sent (together with, as for any web request, your IP address and the app name "L'Athanor"): not your identity, your recipes, your pantry or your prices. You can turn this off in Settings ("Look up scanned products online"): the app then works entirely offline. No ads, no trackers. Same principle for prices: if "Show community prices when scanning" is on, the app asks Open Prices (the collaborative price project of Open Food Facts, ODbL licence) for the prices recorded for that barcode in your country. Only the barcode and the country (chosen in Settings, or your device's) are sent, along with your IP address as with any web request. This option can be turned off separately in Settings; the prices you record yourself stay on your device and are never sent. Product and price data © Open Food Facts contributors.

Permissions used and why

Permission	Why
Camera (`CAMERA`)	Scan a product's barcode to add it to your pantry. It is only requested on the first scan, and the app works without it. The image is analyzed live in the device's memory: it is neither saved nor transmitted. Decoding is entirely local.
Notifications (`POST_NOTIFICATIONS`)	Show kitchen timers and their end-of-timer alarm.
Foreground service (`FOREGROUND_SERVICE`, `FOREGROUND_SERVICE_SPECIAL_USE`)	Run the kitchen timers you start during a recipe, including with the screen off or the app in the background.
Run at startup (`RECEIVE_BOOT_COMPLETED`)	Restore reminders after a phone restart.

No other permission is requested: no location, no contacts, no microphone, no general file access.

Data stored on your device

Your recipes, pantry, shopping lists, timers, settings, and the link between a barcode and a product you named yourself are stored locally. The online databases (Open Food Facts, Open Prices) are only queried when the matching options are on, with the barcode alone (plus the country for prices). This data never leaves your device, unless you decide to export it to a location of your choice. The app is not included in Android's automatic backups. Everything is deleted when you uninstall the app.

"Support the developer" button

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children.

Parchemin — EPUB and PDF reader

Android app "Parchemin" (fr.arcanescookie.parchemin).

In short

Parchemin collects no personal data, shares none, and connects to no server. It is a 100% local reader: your books, annotations, bookmarks and progress stay on your device. The app contains no ads, no trackers, no analytics and no crash-reporting service.

No sensitive permissions

The app requests no sensitive permission: no general storage access, no notifications, no location, no contacts, no microphone, no camera.$1The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet.$1$2 Android's file picker: you choose the files or folders, and the app only has access to those.

Data stored on your device

Parchemin keeps locally the address of your books (they are not copied), their covers, your reading position, your highlights, notes and bookmarks, your collections, your reading statistics and your settings. A password-protected PDF asks for its password every time you open it: it is never saved. This data never leaves your device, unless you decide to export your annotations (Markdown) or create a backup to a location of your choice. The app is not included in Android's automatic backups. Everything is deleted when you uninstall the app.

Read aloud

Read aloud uses the Android text-to-speech engine already installed on your device, with offline voices only. The app sends the text being read to no server.

"Support the developer" button

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children.

Le Passeur — files, downloads and APK installation

Android app "Le Passeur" (fr.arcanescookie.passeur).

In short

Le Passeur collects no personal data and shares none. The app contains no ads, no trackers, no analytics and no crash-reporting service. It sends nothing online, except the files that you ask to download: the only network connection is a request to the (https) address you entered or shared.

Permissions used and why

Permission	Why
Access to all files (`MANAGE_EXTERNAL_STORAGE`)	Le Passeur is a file manager: browse, copy, move, rename and delete your files and folders outside the app's own space. Your files are not read behind your back, copied or transmitted. The app only reads what you open or ask it to manage.
Install apps (`REQUEST_INSTALL_PACKAGES`)	Install or update an app from an APK file that you open with Le Passeur. No installation is ever started without your action: Android may also ask you to confirm. The app doesn't install or update itself, and doesn't install any other app in the background.
Internet and network state (`INTERNET`, `ACCESS_NETWORK_STATE`)	Download the files whose address you provide, and respect the "Wi-Fi only" option.
Foreground service (`FOREGROUND_SERVICE`, `FOREGROUND_SERVICE_DATA_SYNC`)	Continue a download you started when the screen is off or the app is in the background, with a visible notification.
Notifications (`POST_NOTIFICATIONS`)	Download progress and completion, installation result, and an "Update available" notice when a newer APK of an already-installed app appears in Downloads (nothing is installed).

Data stored on your device

Le Passeur keeps locally the list of your downloads, the installation history (name, version, result, SHA-256 fingerprint), your favorite folders, the app's trash and your settings. This data never leaves your device and is deleted when you uninstall the app. To compare an APK with an installed app, the app only reads the package information visible to Android (name, version, signature); it neither saves nor transmits it.

Security

Only https links are accepted. Before installing an APK, the app shows its SHA-256 fingerprint, compares its signature with that of the installed version and warns you if it differs or if the source can't be verified. The trash lets you restore what was deleted; nothing is permanently deleted without your request.

Children

The app collects no data, including from children.

Optional support

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Lanterne — video player

Android app "Lanterne" (fr.arcanescookie.lanterne).

In short

Lanterne collects no personal data, shares none, and connects to no server. Your videos, playback positions, favorites and settings stay on your device. The app contains no ads, no trackers, no analytics and no crash-reporting service, and shows no notification outside of playback.

Internet: only for the optional donation

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet.

Folders you add and local crash report

If you wish, you can add a folder with Android's folder picker: Lanterne remembers access to it (without copying it) to list and play its videos; you can remove it at any time in the settings. If the app closes during playback, a technical report (device model, Android version, cause) is saved only on the device; it is never sent, and you can copy or erase it yourself in the settings.

Permissions used and why

Permission	Why
Videos (`READ_MEDIA_VIDEO`, or `READ_EXTERNAL_STORAGE` before Android 13)	Show the list of videos on the device (folders, duration, resolution, thumbnails), play them, chain the videos of a folder and find subtitle files placed next to them. No file is copied, modified, deleted or transmitted.
"Media playback" foreground service (`FOREGROUND_SERVICE`, `FOREGROUND_SERVICE_MEDIA_PLAYBACK`)	Keep a video's sound playing (audio-only playback) when you leave the app, with a discreet notification shown only during playback.
Notifications (`POST_NOTIFICATIONS`)	Show this playback notification and its buttons (previous, pause, next).
Wake lock (`WAKE_LOCK`)	Keep the processor from sleeping during playback.

Data stored on your device

For each video, Lanterne keeps locally the resume position, the audio/subtitle offsets, the chosen external subtitle and the "favorite" status, as well as your settings (theme, colors, buttons…). This data never leaves your device and is deleted when you uninstall the app. Subtitles you load from the file picker are copied into the app's temporary cache, never sent anywhere else.

Free software

Lanterne uses the libVLC library (VideoLAN), under the LGPL 2.1 or later license. The notices, the license text and the source code addresses are in the app (Settings → About).

Children

The app collects no data, including from children.

Optional support

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Abaque — calculator and converter

Android app "Abaque" (fr.arcanescookie.abaque).

In short

Abaque collects no personal data and shares none. Your calculations, history, favorites and settings stay on your device. The app contains no ads, no trackers, no analytics and no account.

Internet access: only exchange rates, only on request

For its own operation, the app declares the INTERNET permission for a single reason (the optional donation is explained below): the "Refresh" button on the Currencies page, which downloads the exchange rates published by the European Central Bank through the open service frankfurter.dev. This call only happens when you tap that button: never at launch, never in the background. The request contains no information about you (no identifier, no account); as with any connection, the service can see your connection's IP address. The latest rates are kept on the device and remain usable offline.

Other permissions

No other permission is requested: no location, no contacts, no files, no notifications.

Backup

The backup is a single file that you create yourself (Settings › Data) and whose location you choose; Abaque sends it nowhere. Android's automatic (cloud) backup is disabled for this app.

Supporting the developer

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children.

Le Cap — compass and orientation tools

Android app "Le Cap" (fr.arcanescookie.lecap).

In short

Le Cap collects no data, shares none, and connects to no server. Your position, saved places and settings stay on your device. The app contains no ads, no trackers, no analytics and no account.

Internet: only for the optional donation

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet.

Permission used and why

Permission	Why
Precise location (`ACCESS_FINE_LOCATION`), only while in use	Show your coordinates (degrees, UTM, MGRS), speed and altitude, correct the compass to true north (the place's magnetic declination), compute the position of the Sun and Moon, and give the distance and bearing to a saved place. Your position is only read while the app is open on screen; never in the background. It is neither continuously recorded nor sent.

Motion and magnetic field sensors (compass, level, barometer, gyroscope) require no permission; they are only listened to while the corresponding screen is visible.

Data stored on your device

If you place a Le Cap widget on your home screen, the app keeps on the device, to display it, the last reading of heading and position (a single one, replaced at each reading, with its time). Nothing is kept without a widget; this reading is erased as soon as the last widget is removed, and it is never sent. The places you choose to save (name, note, coordinates, altitude) and your settings are kept locally. You can export them yourself as GPX or in a backup, to the folder you choose; Le Cap sends them nowhere. Android's automatic (cloud) backup is disabled for this app. Everything is deleted when you uninstall the app.

Free software

The Sun and Moon calculations use "Astronomy Engine" by Don Cross, MIT license, bundled in the app (no connection).

Supporting the developer

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children.

Sablier — alarm clock, timers, stopwatch and world clock

Android app "Sablier" (fr.arcanescookie.sablier).

In short

Sablier collects no data, shares none, and connects to no server. Your alarms, timers, cities and settings stay on your device. The app contains no ads, no trackers, no analytics and no account.

Internet: only for the optional donation

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet.

Permissions used and why

Permission	Why
Exact alarms (`USE_EXACT_ALARM`, `SCHEDULE_EXACT_ALARM` on Android 12)	Ring an alarm or timer at the exact time requested: this is the app's main function.
Notifications (`POST_NOTIFICATIONS`) and full-screen display (`USE_FULL_SCREEN_INTENT`)	Show the alarm screen, the "Stop" / "Snooze" buttons and the timer countdown, including when the phone is locked.
Phone startup (`RECEIVE_BOOT_COMPLETED`)	Reschedule your alarms after a restart or a time or time-zone change. Without it, they would be forgotten.
"Media playback" foreground service (`FOREGROUND_SERVICE`, `FOREGROUND_SERVICE_MEDIA_PLAYBACK`)	Play the ringtone until you stop the alarm.
Wake lock (`WAKE_LOCK`) and vibration (`VIBRATE`)	Keep the phone awake during the ringtone and make it vibrate if you chose that.
Ignore battery optimization (`REQUEST_IGNORE_BATTERY_OPTIMIZATIONS`)	Only if you tap "Allow" on the "Will this alarm ring?" screen: some phones otherwise prevent alarms from ringing.

No location permission: the sunrise and sunset times of the world clock are computed from city coordinates built into the app.

Data stored on your device

Your alarms, timers, cities, stopwatch laps and settings are kept locally. The ringtones you choose are read from your device. You can make a backup yourself in the folder of your choice; Sablier sends it nowhere. Android's automatic (cloud) backup is disabled for this app. Everything is deleted when you uninstall the app.

Free software

Sunrise and sunset times use "Astronomy Engine" by Don Cross, MIT license, bundled in the app (no connection).

Supporting the developer

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children.

Écho — voice recorder

Android app "Écho" (fr.arcanescookie.echo).

In short

Écho collects no data, shares none, and connects to no server. Your recordings stay in the app, on your device, unless you decide to share or export them yourself. The app contains no ads, no trackers, no analytics and no account.

Internet: only for the optional donation

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet.

Permissions used and why

Permission	Why
Microphone (`RECORD_AUDIO`)	Record sound. The microphone is only used when you tap the record button, never in the background without a visible recording. The app does not record phone calls.
"Microphone" foreground service (`FOREGROUND_SERVICE`, `FOREGROUND_SERVICE_MICROPHONE`) and notifications (`POST_NOTIFICATIONS`)	Continue recording with the screen off, with a visible notification to pause or stop. Android also shows its own microphone indicator.
Wake lock (`WAKE_LOCK`)	Keep the phone from sleeping during a recording.

Data stored on your device

Recordings (audio files), their titles, tags, folders, markers and your settings are kept in the app's private storage. Nothing leaves without your action: the "Share" button opens Android's share sheet, and "Export" copies the file to the folder you chose. Android's automatic (cloud) backup is disabled for this app. Items in the trash are permanently deleted after 30 days. Everything is deleted when you uninstall the app.

Supporting the developer

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children.

Ondes — Internet radio

Android app "Ondes" (fr.arcanescookie.ondes).

In short

Ondes collects no personal data and sends none to Arcanes de Cookie. The app contains no ads, no trackers, no analytics and no account. Your favorites, history, alarms and settings stay on your device.

Network connections: only the directory and the radios

For its own operation, the Internet permission is only used to:

query the free community directory radio-browser.info (search by name, country, language or genre; list of countries, languages and genres). Your device sends it the search criteria and, as with any Internet connection, its IP address. When you start a station from the directory, the station's public identifier is sent to count the listen (popularity statistics); no data about you is attached;
play the audio stream of the station you choose: the station's server then sees your IP address, as with any radio on the Internet;
display the station logos, hosted by the stations themselves.

Some stations broadcast their stream over http (unencrypted): the app accepts this so it can play them. Some stations insert advertising in their audio stream; it comes from the station, Ondes adds none. No other network call is made. Directory responses are kept locally so you can browse offline.

Permissions used and why

Permission	Why
Internet and network state (`INTERNET`, `ACCESS_NETWORK_STATE`)	Directory, audio streams, and automatic reconnection when the network returns.
"Media playback" foreground service, notifications, wake lock (`FOREGROUND_SERVICE`, `FOREGROUND_SERVICE_MEDIA_PLAYBACK`, `POST_NOTIFICATIONS`, `WAKE_LOCK`)	Continue playback with the screen off, with the playback notification.
Exact alarms and startup (`USE_EXACT_ALARM`, `SCHEDULE_EXACT_ALARM` on Android 12, `RECEIVE_BOOT_COMPLETED`)	Radio alarm at the chosen time, rescheduled after a restart.

Data stored on your device

Your favorites (including stations added by hand), folders, recently played stations, titles heard (kept for 90 days), alarms and settings are kept locally. The advanced "Record a stream" option is off by default; if you turn it on, the files stay in the app until you share or delete them, and you alone are responsible for their use with regard to copyright. Android's automatic (cloud) backup is disabled for this app. Everything is deleted when you uninstall the app.

Free software and services

Directory: radio-browser.info (free and open). Playback: AndroidX Media3 / ExoPlayer, Apache 2.0 license.

Supporting the developer

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children. Radio stations are third-party content whose content Ondes does not control.

Almanach — weather and astronomy

Android app "Almanach" (fr.arcanescookie.almanach).

In short

Almanach collects no personal data and sends none to Arcanes de Cookie. The app contains no ads, no trackers, no analytics and no account. Your places, settings and the latest weather received stay on your device. All the astronomy (sun, moon, planets, eclipses, sky map) is computed on the phone, without a connection.

Network connections: only weather and place search

For its own operation, the Internet permission is only used to:

fetch the weather forecasts from MET Norway (Norwegian Meteorological Institute, api.met.no, data under the CC BY 4.0 license). The request contains the coordinates of the chosen place, rounded to 4 decimals (about 10 m), and, as with any Internet connection, your IP address;
look up a place name with Nominatim / OpenStreetMap (© OpenStreetMap contributors, ODbL license), only when you submit a search, or to name your current position when you ask. The request contains the searched text, or the coordinates of your position.

No other network call is made. The latest weather response is kept on the device to be shown offline with its date.

Permissions used and why

Permission	Why
Internet and network state (`INTERNET`, `ACCESS_NETWORK_STATE`)	Weather forecasts and place search, as described above.
Approximate location (`ACCESS_COARSE_LOCATION`), only when you tap "Use my location"	Show the weather and sky where you are. Your position is never tracked in the background or continuously recorded; it is only kept as a place in your list, which you can delete.
Notifications (`POST_NOTIFICATIONS`)	Only for the optional "rain within the hour" and "strong wind" alerts, off by default. If you turn them on, the app checks the weather for your chosen place at most every 30 minutes, using the network.

Data stored on your device

Your places (names and coordinates), the latest forecast received for each, and your settings (units, alerts, sky map) are kept locally. Android's automatic (cloud) backup is disabled for this app. Everything is deleted when you uninstall the app.

Sources and free software

Forecasts: MET Norway, CC BY 4.0 / NLOD license. The data is adapted (unit conversion, grouping by day, UV index estimated from cloud cover).
Places: © OpenStreetMap contributors, ODbL license.
Astronomy: Astronomy Engine © Don Cross, MIT license.
Sky map: d3-celestial © 2015 Olaf Frohn (BSD 3-clause license), based on ESA's Hipparcos and Tycho-2 catalogs.

Supporting the developer

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children.

Rune — keyboard

Android app "Rune" (fr.arcanescookie.rune).

In short

Rune collects no data, shares none, and connects to no server. A keyboard sees everything you type: that's why Rune never sends anything you type: its input code opens no connection. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet. No ads, no trackers, no analytics, no account, no keystroke log.

Sensitive fields

In password, code, web address and e-mail fields, and in fields that ask not to personalize typing, Rune offers no suggestions, learns no word and copies nothing to the clipboard history. Copied content marked "sensitive" by the source app is never saved.

Permission used and why

Permission	Why
Microphone (`RECORD_AUDIO`), requested the first time you use dictation	Entirely offline voice dictation. The microphone is only used while you hold the dictation button; the sound is recognized on the device by a model (Vosk, Apache 2.0 license) that you imported yourself, and is never sent or recorded.

Data stored on your device

Learned words and the history of word sequences (personal dictionary, erasable at any time), the clipboard history, pins and copied images (adjustable retention time, erasable in one tap), recent emoji and symbols, your symbol and sticker packs, your layouts and your settings stay in the app's private storage. Nothing is sent anywhere. Android's automatic (cloud) backup is disabled: only the manual backup, to the folder of your choice, lets you move them. Everything is deleted when you uninstall the app.

Packs, voice models and layouts are files that you choose and import: Rune downloads nothing. The "Translate" button sends the selected text to the translation app you choose (Android's "Process text" action): Rune translates nothing itself.

Free software and data

Word frequency lists: "FrequencyWords" by Hermit Dave (content under the CC BY-SA 4.0 license, based on OpenSubtitles). Emoji: Unicode (emoji-test) and French CLDR names, Unicode license. Speech recognition: Vosk (Apache 2.0) and JNA (Apache 2.0).

Supporting the developer

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Children

The app collects no data, including from children.

Éphéméride — calendar and planner

Android app "Éphéméride" (fr.arcanescookie.ephemeride).

In short

Éphéméride collects no data, shares none, and connects to no server. Your events, tasks and reminders stay on your phone. No ads, no trackers, no account. System calendars (Google, Exchange…) remain synchronized by their own account, not by Éphéméride.

Permissions used and why

Permission	Why
Calendar (`READ_CALENDAR`, `WRITE_CALENDAR`), requested only when you enable a system calendar	Show, create and edit the events of the calendars already on your phone, in the same view as your private calendar. Without this permission, the app works with its private calendar.
Contacts (`READ_CONTACTS`), optional	Show your contacts' birthdays. Contacts are read on the device, never copied or sent.
Exact alarms (`USE_EXACT_ALARM`)	Trigger event reminders at the scheduled time (the main function of a calendar app).
Notifications (`POST_NOTIFICATIONS`)	Show reminders, with "Snooze" and "Open" actions.
Device startup (`RECEIVE_BOOT_COMPLETED`) and battery optimization (`REQUEST_IGNORE_BATTERY_OPTIMIZATIONS`)	Reschedule reminders after a restart or a time change; offer to turn off battery optimization so reminders aren't delayed.

Data stored on your device

The private calendar, events, tasks, reminders, settings and the definition of the Valshaari calendar stay in the app's private storage. Nothing is sent anywhere. Android's automatic (cloud) backup is disabled: only the manual backup, to the folder of your choice, lets you move them. Everything is deleted when you uninstall the app. .ics files are imported or exported only at your request, to the locations you choose. Calculations (public holidays, Moon phases) are done on the device.

Free software

Recurrences and iCalendar files: iCal4j (BSD 3-clause license, © Ben Fortuna and contributors). Moon phases: Astronomy Engine (MIT license, © Don Cross).

Children

The app collects no data, including from children.

Optional support

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Le Foyer — launcher (home screen)

Android app "Le Foyer" (fr.arcanescookie.foyer).

In short

Le Foyer collects no data, shares none, and connects to no server. Its layout (pages, dock, folders, placed widgets) and its settings stay on your device. The app contains no ads, no trackers, no analytics and no account.

A single, ordinary permission

For its own operation, Le Foyer uses a single ordinary permission, granted automatically by Android: REQUEST_DELETE_PACKAGES, used only for an app's "Uninstall" menu; Android then shows its own confirmation box and nothing is deleted without your agreement. It gets the list of your apps through Android's standard service reserved for home screens (LauncherApps); this list is never sent anywhere. The widgets you place are those of your other apps and remain subject to their own rules.

The Google Play version also contains the official Google Play Billing library, used only for the optional support described below; it is what adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions. Le Foyer itself sends no request and contacts no server.

Files and text: always at your initiative

The layout backup file and the theme file are written (or read) only at the location you choose with Android's file picker; automatic backup only writes to the folder you designated. These files stay on your device. What you type in the search is sent nowhere by Le Foyer: if you tap "Ask Claude" or "Search the web", the text is passed to the Claude app or to your device's browser, at your request. Voice search uses your device's speech recognition service (Le Foyer has no access to the microphone). The icon packs you choose are read locally.

Optional support

The "Support the developer" button opens Google Play's donation sheet: the payment is handled by Google Play and Le Foyer sees none of it. Nothing is locked behind this support.

Sceau — QR code scanner and generator

Android app "Sceau" (fr.arcanescookie.sceau).

In short

Sceau collects no data, shares none, and connects to no server. The codes you scan or create, the history, the templates and the settings stay on your device. The app contains no ads, no trackers, no analytics and no account.

Permissions used and why

Permission	Why
Camera (`CAMERA`)	Read the codes you show to the camera. Requested on the first scan. The image is analyzed in memory: it is neither saved nor sent. Without this permission, you can still read a code from an image in your gallery.
Vibration (`VIBRATE`)	A short vibration for each code read (adjustable; ordinary permission granted automatically).

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet. To display the widget, the Android library used adds two ordinary permissions (brief wake lock and foreground service); Sceau makes no permanent use of them.

Data stored on your device

If history is turned on (on by default, can be turned off), each code read is kept in the app's private storage with its date, favorites and tags; deleted codes stay in a trash for 30 days. The code templates you save (a Wi-Fi template contains its password) and your settings are stored there too. Android's automatic (cloud) backup is disabled. Everything is deleted when you uninstall the app.

Links, searches and actions: always at your initiative

Sceau never opens a link on its own: the link is shown in full with warnings, and only opens in your device's browser after your tap. "Search" for a product or a text is handed to your device's browser: Sceau itself sends nothing. Saving a Wi-Fi network goes through Android's service, which asks you to confirm; adding a contact or an event opens the corresponding app on your device, pre-filled, without saving anything without your agreement.

Files and sharing: always at your initiative

Exporting the history (CSV), code images (PNG, SVG, PDF), the full backup and saving to the gallery only happen when you ask, at the location you choose with Android's file picker. Images you choose or share to Sceau are read locally to look for codes. Sharing a code image passes that image to the app you designate.

Widget

The widget shows on your home screen the last code read and the previous ones (depending on its size); you can hide this information in its configuration. It only reads the app's history, on the device.

Optional support

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Pensine — encyclopedia

Android app "Pensine" (fr.arcanescookie.pensine), a fan encyclopedia of the wizarding universe.

In short

Pensine collects no personal data and sends none to Arcanes de Cookie. No ads, no trackers, no analytics, no account in the app. The whole encyclopedia is stored on your phone: reading, search and filters work without a connection.

Internet connection: only for the content

For its own operation, the Internet permission is only used to ask pensine.arcanescookie.fr whether a new version of the content exists (a simple version number), then to download it. This check happens at launch, at most once every 6 hours, and can be turned off in Settings. As with any Internet connection, the site's server sees your IP address; nothing else is sent.

Data stored on your device

Your favorites, the list of recently viewed entries, your appearance settings and the copy of the encyclopedia stay in the app's private storage. Android's automatic (cloud) backup is disabled: only the manual backup, to the folder of your choice, lets you move your favorites. Everything is deleted when you uninstall the app.

Site pages opened in the browser

The "Suggest an edit" and "Version history" buttons open the corresponding page of the site in your device's browser. These pages are governed by the Pensine site's policy (contributor accounts, notification e-mails). No feature of the app is locked behind an account.

Content

The entries are original summaries written by fans, without protected images or excerpts. Pensine is not affiliated with any rights holder of the saga.

Children

The app collects no data, including from children.

Optional support

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Carillon — make your own ringtones, notification sounds and alarms

Android app "Carillon" (fr.arcanescookie.carillon).

In short

Carillon collects no data, shares none, and connects to no server. Your tracks never leave your device: they are played, trimmed and saved on the phone. The app contains no ads, no trackers, no analytics and no account.

Internet: only for the optional donation

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet.

Permissions used and why

Permission	Why
Read the device's music (`READ_MEDIA_AUDIO`, `READ_EXTERNAL_STORAGE` up to Android 12)	Show you your tracks so you can pick one. Asked only when you open "My music"; the "Choose a file" button needs no permission.
Modify system settings (`WRITE_SETTINGS`)	Only if you tap "Set as my ringtone / notification sound / alarm": Android then asks you to allow it, with an explanation on screen. It is used to change your default sound, nothing else.
Write to the ringtones folder (`WRITE_EXTERNAL_STORAGE`, Android 9 and below only)	Save your creations in the phone's ringtones. Not needed on Android 10 and above.

No contacts, microphone, camera or location permission.

Data stored on your device

Your creations are saved in Android's Ringtones, Notifications and Alarms folders, in a new file: the original track is never modified. Carillon only keeps the list of its creations and your settings on the device. You can delete a creation from "My creations". Android's automatic (cloud) backup is disabled for this app.

Sound pack

The eight sounds of the pack are original creations made for the app: no copyrighted track is shipped with Carillon.

Children

The app collects no data, including from children.

Optional support

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Grimoire — wheel of the year, moon, herbal, spells and rituals

Android app "Grimoire" (fr.arcanescookie.grimoire).

In short

Grimoire collects no data, shares none, and connects to no server. Your favorites, your plant stock, your settings and the notes of your practice journal stay on your device. The app contains no ads, no trackers, no analytics and no account.

Internet only for the optional donation, no sensitive permission

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet. It asks for no location, contacts, microphone, camera, storage or notification permission: moon phases and seasons are computed on the device, and backups go to the file you choose yourself.

Data stored on your device

Your favorites, your plant "stock", the chosen hemisphere and your practice journal are kept locally. Exporting the journal (Markdown) or making a backup are actions you take, to the app or folder you choose; Grimoire sends them nowhere. Android's automatic (cloud) backup is disabled for this app. Everything is deleted when you uninstall the app.

Content

The texts (herbal, spells, rituals, infusions) ship with the app, are original and do not replace medical advice. The plant information is cultural and preventive: some plants are toxic and must never be ingested. Valshaari content is the work of the calendar's author.

Children

The app collects no data, including from children. It is intended for adults (toxic plants, flames).

Optional support

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Fiole — battery level, history and charge alerts

Android app "Fiole" (fr.arcanescookie.fiole).

In short

Fiole collects no data, shares none, and connects to no server. Your battery history (level, temperature, charging sessions) is stored on your device only. The app contains no ads, no trackers, no analytics and no account.

Internet: only for the optional donation

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet.

Permissions used and why

Permission	Why
Notifications (`POST_NOTIFICATIONS`)	Warn you when the battery reaches the level you chose, is full, is low or gets hot. Asked only for alerts.
Phone startup (`RECEIVE_BOOT_COMPLETED`)	Reschedule the periodic reading after a restart. Without it, the history would stop.

No location, contacts, microphone, camera or storage permission. The battery state is read with Android's standard functions, with no special authorization. The app has no access to the list of your other apps.

Data stored on your device

Battery readings (level, temperature, voltage, charging state, time) are kept locally for 35 days, then deleted automatically. The CSV export and the backup are actions you take, to the file you choose; Fiole sends them nowhere. Android's automatic (cloud) backup is disabled for this app. Everything is deleted when you uninstall the app.

Children

The app collects no data, including from children.

Optional support

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.

Rouage — automatic profiles and quick settings tiles

Android app "Rouage" (fr.arcanescookie.rouage).

In short

Rouage collects no data, shares none, and connects to no server. Your profiles, triggers and the log of their activations are stored on your device only. The app contains no ads, no trackers, no analytics and no account.

Internet: only for the optional donation

The app connects to no server by itself. The official Google Play Billing library, used only for the optional support, adds the INTERNET, ACCESS_NETWORK_STATE and com.android.vending.BILLING permissions; it only talks to Google Play when you open the donation sheet.

Permissions used and why

Permission	Why
Modify system settings (`WRITE_SETTINGS`, special access)	Change the brightness and screen rotation when a profile asks for it. You grant it yourself in Android's settings.
Do Not Disturb (`ACCESS_NOTIFICATION_POLICY`, special access)	Turn on total silence and the Do Not Disturb filters when a profile asks for it. Rouage does not read your notifications.
Alarms and reminders (`SCHEDULE_EXACT_ALARM`, special access)	Start and stop a profile at the exact time of a time range you created. Without this access, times can be a few minutes late.
Notifications (`POST_NOTIFICATIONS`)	The "active profile" notification with its "Put everything back as before" button, reminders and the "open Le Barde" notification chosen in a profile.
Phone startup (`RECEIVE_BOOT_COMPLETED`)	Put the trigger alarms back in place after a restart.
Network and Wi-Fi state (`ACCESS_NETWORK_STATE`, `ACCESS_WIFI_STATE`)	Know when a Wi-Fi network connects or is lost, for Wi-Fi triggers. No data is sent.
Location (`ACCESS_FINE_LOCATION`)	Only to read the NAME of the Wi-Fi network (Android requires it), when you add a "specific network" trigger. Asked only at that moment, used only while the app is open; Rouage never reads, stores or uses your position, has no background location access and does no geofencing.
Nearby devices (`BLUETOOTH_CONNECT`)	Pick an already paired Bluetooth device and know whether it is connected, for Bluetooth triggers. Asked only when you add a Bluetooth trigger.

No contacts, microphone, camera or storage permission. The flashlight is controlled without any permission. The app has no access to the list of your other apps (it only checks whether Le Barde, Sceau, Sablier and Veilleur are installed, to offer to open them).

Data stored on your device

Your profiles (name, chosen settings), triggers (time ranges, a Wi-Fi network name, a Bluetooth device address and name, battery levels) and the activation log (kept for 90 days) stay on the device. The backup is an action you take, to the file you choose; Rouage sends it nowhere. Android's automatic (cloud) backup is disabled for this app. Everything is deleted when you uninstall the app.

Children

The app collects no data, including from children.

Optional support

This optional button opens the Google Play donation sheet (official Google Play Billing library, com.android.vending.BILLING permission). The payment and the data linked to it (identity, payment method…) are handled by Google, under its own privacy policy, and not by the app. Each donation is a one-time purchase, with no subscription, and no feature is locked behind this support.