Privacy Policy

Last updated: 2026-08-15

StarSonic has no account, no telemetry and no server belonging to its author. It is a client for a music server that you run. This page describes what it does with data; it is short because the app does little.

What stays on your device

• Your server credentials. The address, username and password of each server are held in Android’s own account system on the phone. They are sent only to the server you entered them for, and to nobody else.
• Your library. Artists, albums, tracks and playlists are copied from your server into a database on the device so that browsing works offline. It is a copy of your own catalogue and it never leaves the phone.
• Cached music. Tracks you play are cached on the device. Clearing the cache from the app’s settings removes them.

What is sent, and to whom

Only to the server you configured: requests for your catalogue, cover art and audio, authenticated the way the Subsonic protocol prescribes — a token derived from your password rather than the password itself, on every request.

If you cast to a Chromecast, the phone serves the audio to that device over your local network. Nothing in that path leaves your network.

There is no analytics SDK, no crash reporting service and no advertising. The app makes no request to any address you have not given it.

What the author receives

Nothing. There is no backend to receive it.

Permissions

• Internet and network state — to reach your server.
• Accounts and sync settings — because servers are stored as Android accounts and the library is refreshed by the platform’s sync mechanism.
• Wake lock and foreground service — to keep playing with the screen off.

Children

The app is not directed at children and collects nothing from anyone.

Changes

If what the app does with data changes, this page changes with it, and the date above moves. Questions: apps@gpm.name.