Last updated 13 September 2026
Magpie Pocket is a self-hosted media library. This policy covers the Magpie Pocket apps for
Android, iOS, macOS, and the web, and the service they connect to at
app.magpiepocket.com.
| Data | Why |
|---|---|
| Email address and an account identifier | Supplied by the OpenID Connect provider when you sign in. It is how the service knows which library is yours. |
| Display name | Shown in the app so members of a shared workspace can tell each other apart. |
| The media files you add, and their names and folder structure | This is the library itself. |
| Records of actions you take | Uploading, converting, or organising an item creates a record of that operation so the app can show its progress and its outcome. |
We do not collect your location, your contacts, your device identifiers, or anything from outside the app.
The apps never see or store your password. Sign-in happens against an OpenID Connect identity provider in a browser, and the apps only ever receive a token. There is no password stored by this service.
On Android this data is explicitly excluded from Google's automatic cloud backup, so the index of your library is never copied to Google Drive. Uninstalling the app deletes all of it.
Media files are transferred directly between your device and the object storage that holds them, using short-lived signed links. The bytes do not pass through any intermediary service. All traffic is encrypted in transit with HTTPS.
On Amazon Web Services infrastructure in the EU (Frankfurt, eu-central-1). Files
are encrypted at rest.
Nobody, unless you put it in a shared workspace, in which case the other members of that workspace can see what you share there. Our infrastructure providers — Amazon Web Services and Cloudflare — process data on our behalf as part of hosting the service, and do so under their own contractual obligations. We disclose data to no one else, except where the law requires it.
Your library is kept until you delete it or ask us to close your account. Deleting an item removes it from storage.
You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account and everything in it. Write to privacy@magpiepocket.com and we will act on it within 30 days. If you are in the EU or UK, this is your GDPR right of access, rectification, and erasure.
The service is not directed at children under 13, and we do not knowingly create accounts for them.
If this policy changes, the date at the top of the page changes with it. Material changes will be announced in the app before they take effect.