Paxpi Privacy Policy - YNNOB Solutions

Paxpi Privacy Policy

Last updated: 11 October 2026

Paxpi is a wallpaper app operated by YNNOB Solutions (Philipp Bonny). This notice explains the app's data processing. The website privacy policy applies when you visit this website.

Your choices at a glance

1. Who is responsible?

Philipp Bonny, YNNOB Solutions
Reuterstraße 17
66117 Saarbrücken, Germany
solutions@ynnob.com

You can also use our contact form for privacy questions or rights requests.

2. Wallpaper delivery and local storage

When you request wallpapers, categories or image files, our API and image delivery services receive the connection's IP address and technical request information. Requests include the app version and image dimensions needed for compatibility and suitable image sizes. Completed image downloads can be recorded with a wallpaper reference, a download identifier and a timestamp to maintain download counts.

We process requests to provide the wallpaper service (Article 6(1)(b) GDPR). Protecting the service against abuse and diagnosing delivery problems is our legitimate interest (Article 6(1)(f) GDPR). Optional Firebase consent is separate from this necessary operation.

The app stores a local account identifier, preferences, consent choices and image caches on your device. It also maintains local records used by app features, such as favorites. These records are not a Google sign-in account. When you save an image to your gallery or set a wallpaper, the app uses the relevant device permission and system feature. Images you save to your gallery remain there until you remove them; uninstalling the app does not remove those gallery images.

3. Optional Google Firebase reports

We use the following services only with the corresponding consent (Article 6(1)(a) GDPR). You can allow all, decline all or choose individual services. Declining does not restrict wallpaper access. Reports may contain pseudonymous identifiers and technical information; they are not described as anonymous.

Firebase Analytics

App interactions, device/app information and pseudonymous app-instance identifiers help us understand feature use. Events can include wallpaper action outcomes and ad-format, placement or reward events. This helps us decide what to improve.

Firebase Performance Monitoring

App startup, network response and responsiveness measurements help find slow operations. Reports can include installation identifiers, device/network information, country derived from IP addresses and request paths; Firebase excludes URL query parameters and request bodies from its automatic network reports.

Firebase Crashlytics

Crash reports, exception details, device/app versions and installation identifiers help diagnose faults. Google documents a 90-day retention period before removal begins. Performance data starts removal after 30 days for IP-associated events and 60 days for installation-associated and de-identified data. See Firebase's privacy and retention information.

Turning a service off prevents future optional reporting through that service; it does not automatically erase reports already sent. Withdrawal does not affect the lawfulness of processing before withdrawal. Contact us for an access or deletion request.

4. Google advertising and consent

Paxpi uses Google AdMob to support the app with ads, including optional rewarded ads. Google's User Messaging Platform presents the applicable consent message and partner/purpose information. Ad services may process IP addresses, device and advertising identifiers, ad interactions and your advertising choices, depending on the permitted purposes. Personalized advertising and optional device access rely on the consent requested in that message. Declining personalization may still allow ads under the applicable Google settings.

These choices are separate from our Firebase switches. A reward for watching an ad does not require you to opt into Firebase reports. Details about Google's processing are available in Google's privacy policy and information about partner apps.

5. Recipients and international processing

Our API and image delivery infrastructure is hosted by Hetzner Online GmbH at FSN1 in Falkenstein, Germany. Hetzner processes technical requests as our hosting provider. Google and the partners identified in its advertising message receive data for services you permit. Information may also be disclosed where required by law. Hosting in Germany does not mean that the separate Google services process all data in Germany.

Firebase services can process information on Google's global infrastructure, including outside the European Economic Area. Google's applicable data-processing terms describe safeguards, including standard contractual clauses and, where applicable, its EU–US Data Privacy Framework certification. You can request information about the safeguards relevant to your data from us. See Firebase's data-processing terms and Google's transfer framework information.

6. Retention

Local preferences and feature records remain until removed through the app or the device's app-data controls. Cached images can be evicted by the cache or operating system. Saved gallery images follow your device's storage controls.

Routine operational logs and request traces have a 7-day retention period for diagnosing delivery failures and protecting the service, followed by scheduled storage cleanup. Necessary evidence for a specific security incident or legal obligation may be kept longer with restricted access for that purpose. Support correspondence is retained while handling the request and for applicable legal obligations.

We set Google Analytics event-data and user-data retention to 2 months, with resetting user-data retention on new activity disabled. These settings govern the corresponding record types; they do not cap the lifetime of every aggregate report. Removal follows Google's scheduled deletion process. See Google's retention documentation for how these controls work. Withdrawal stops future optional reporting rather than automatically deleting earlier records; you can request deletion by contacting us.

7. Your rights

Subject to the GDPR's conditions, you may request access, correction, deletion, restriction and portability of your personal data. You may object to processing based on legitimate interests and withdraw consent at any time. You do not have to enable optional services to exercise these rights.

You may complain to a supervisory authority, including the Unabhängiges Datenschutzzentrum Saarland, or the authority where you live or work. Provide only the information needed for your request; we may need proportionate information to identify relevant records.

8. Changes to this notice

We will update this page when relevant processing changes. New optional purposes require a new choice in the app. Cosmetic changes to an onboarding screen do not change your saved consent choices.