Privacy Policy

Showcase your Photos · Last updated 29 June 2026

Showcase your Photos ("the App", "we", "us") is a photo viewer for Android TV that lets you display photos from your own Google Photos library on your television. This policy explains what data the App and its supporting service handle, why, and how it is protected. The service is operated by Protostream. If you have any questions, contact us at tom@protostream.io.

The short version

Information we access

To show your photos on your TV, the App connects to your Google account with your permission and uses the following:

• Google Photos content you select — using the Google Photos Picker, you choose which photos and videos to display. The App receives read-only access (the photospicker.mediaitems.readonly scope) to only the items you pick, so it can show them on your TV. We never request the ability to modify or delete anything in your library.
• Google Drive files you select — optionally, using the Google Picker you can choose photos stored in Google Drive. The App uses the per-file drive.file scope, which grants access only to the specific files you pick — never your whole Drive — so it can display them on your TV. We never request broad Drive access and never modify or delete your files.
• Dropbox files you select — optionally, you can link Dropbox and choose photos to display. The App requests read-only access (files.metadata.read, files.content.read) and displays only the images you pick. We never modify or delete your Dropbox files. Your Dropbox sign-in tokens are stored encrypted and used only to show the photos you chose; disconnecting or deletion removes them (see below).
• OneDrive files you select — optionally, you can link Microsoft OneDrive and choose photos to display. The App requests read-only access (Files.Read) and displays only the images you pick. We never modify or delete your OneDrive files. Your Microsoft sign-in tokens are stored encrypted and used only to show the photos you chose; disconnecting or deletion removes them.
• Flickr photos you select — optionally, you can link Flickr and choose photos to display. The App requests read-only access and shows only the photos you pick. We never modify or delete your Flickr photos. Your Flickr sign-in tokens are stored encrypted and used only to show the photos you chose; disconnecting or deletion removes them.
• Google sign-in tokens — when you link your TV, our service receives access and refresh tokens from Google that allow the App to retrieve the photos you selected. These are stored encrypted (AES-256-GCM) and are used only to display your photos.
• Device pairing data — a temporary pairing code and timestamps used to securely link your TV to your Google account during sign-in.
• Feedback you send us — if you use the in-app feedback form, we store the message you write and, only if you provide it, the email address you give for a reply. Your TV's pairing code and linked account email may be attached so we can place the report. This is used solely to answer you and improve the App.
• Basic technical logs — standard server logs (such as request times and IP address) generated for security and reliability. These are not used to identify or track you.

How we use it

The data above is used for one purpose: to let you view the photos and videos you choose on your TV. We do not use it for advertising, marketing, profiling, or any unrelated purpose.

How your data is shared

We do not sell, rent, or trade your personal data. We do not share your Google data with third parties. The only external service involved is Google itself, which provides the photos and the sign-in, in accordance with Google's Privacy Policy.

Limited Use disclosure

The App's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google user data only to provide and improve the photo-viewing feature, we do not transfer it to others except as necessary to provide that feature, and we do not use it for advertising or allow humans to read it (except with your consent, for security, or as required by law).

Data retention

Encrypted sign-in tokens are kept only while your TV remains linked, so the App can continue to display your photos without asking you to sign in repeatedly. Pairing codes expire automatically (within 30 minutes if sign-in is not completed). When you disconnect, or when tokens are revoked, the associated data is removed.

Revoking access

You can revoke the App's access to your Google account at any time from your Google Account security settings, under Third-party apps & services. Doing so immediately stops the App from accessing your photos.

Deleting your data

You can delete the data we hold (the link between your TV and your Google account, i.e. the encrypted sign-in tokens and your account email) at any time. Visit /delete-account and sign in with the Google account you linked; we will revoke our access and permanently remove your linked records from our servers. This does not affect any photos in your Google Photos library. If you prefer, email tom@protostream.io and we'll delete your data for you.

Security

Sign-in tokens are encrypted at rest, and all communication with Google and between your TV and our service uses encrypted (HTTPS/TLS) connections.

Children's privacy

The App is not directed to children under 13 and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions about this policy or your data? Email tom@protostream.io.

© Protostream. Showcase your Photos.