The short version
The app collects nothing about you. There is no account to create, no analytics, no advertising, and no server behind it. Your photos are captured, processed, and saved entirely on your phone, and they never leave it unless you share them yourself. That has not changed and is not going to.
This website is a separate thing, and the difference is worth stating plainly rather than burying. Since August 28, 2026 it counts page views using Cloudflare Web Analytics, so that there is some idea of which pages are worth writing. It sets no cookies, stores nothing on your device, and cannot follow you from one site to the next — but it is analytics, and the site no longer claims otherwise. The support form, if you choose to write in, sends what you type. Both are described in full below.
What we collect
From the app: nothing.
xMosaique contains no analytics, crash-reporting, advertising, or attribution code. The developer receives no personal information, no usage statistics, no device identifiers, and no photos. There is no backend service that the app talks to on your behalf.
From this website: counts of page views, and whatever you type into the support form.
Page views are measured by Cloudflare Web Analytics. What that records is the URL visited, the referring site, the country the request came from, and the browser, operating system and device type reported by your browser — plus how quickly the page loaded. It sets no cookie, writes nothing to your device, and uses no fingerprinting; because it keeps no identifier of any kind, it cannot tell a returning visitor from a new one or follow anyone between sites, and it counts a visit by the referring site instead. Your IP address is used to resolve which country a request came from and is not stored.
Cloudflare collects and processes that data on its own systems. The developer sees only the aggregate result in Cloudflare's dashboard — the per-request data is never received, downloaded, or joined to anything else, and there is no server here to join it to. Cloudflare's handling of it is covered by Cloudflare's privacy policy.
Permissions the app asks for
The app requests only the permissions it needs to work as a camera, and iOS asks you before granting any of them. You can change your mind at any time in Settings → Privacy & Security on your device.
Camera
Required. Used to show the live preview and to take photos. The camera feed is processed on device, in memory, and is never recorded or transmitted.
Photo library
Required to save the photos you take. xMosaique writes finished captures to your library and does not read, scan, or index the photos already in it.
Location — optional
Only requested if you turn on GPS tagging. When enabled, your coordinates are written into the photo's own EXIF metadata, exactly as the stock Camera app does. That metadata stays inside the image file on your device. If GPS tagging is off, location is never requested or used.
Presets and cloud storage
Presets are ordinary .xmp files stored in the app's own folder on your device.
You can import presets from the iOS Files picker — which includes iCloud Drive — with no sign-in of any kind. That transfer happens entirely within iOS.
You can also, optionally, sign in to Google Drive or Microsoft OneDrive from inside the app to import presets. If you do:
- The sign-in uses the provider's own OAuth flow in a system web view. The app never sees your password.
- The resulting access token is stored in the iOS Keychain on your device and nowhere else.
- The app uses it only to search for
.xmpfiles and download the ones you select. - Requests go directly from your phone to Google or Microsoft. The developer operates no server and never sees your account, your files, or your token.
- You can revoke access at any time by signing out in the app, or from your Google or Microsoft account security settings.
While you are signed in, that provider's own privacy policy governs what they log about the requests your device makes.
Settings and other data
Your preferences — capture format, bit depth, grain and halation settings, the active preset, and so on — are stored in the app's own storage on your device. They are included in your phone's regular encrypted backups if you use one, and they are removed when you delete the app.
The support form
The support form asks for three things: your name, your email address, and your message.
- Submitting it sends those three fields, and nothing else, to the support inbox as an email. Your address is set as the reply-to so a reply reaches you.
- Nothing is written to a database, a spreadsheet, or a log. There is no copy of your message on this website, because the website has no storage to keep one in.
- Your address is used to answer you and for nothing else. There is no mailing list, and you will not be contacted about anything you did not write in about.
- The email sits in the support mailbox until it is deleted, the same as any other correspondence. Ask, and the thread will be deleted.
- The form is the only thing on the site that asks you for anything, and it is entirely optional. Reading a page sends the page view described above and nothing else — no name, no address, nothing you typed.
To stop the form being used by bots to send mail, submissions are checked by Cloudflare Turnstile. Turnstile is a privacy-focused alternative to a CAPTCHA: it sets no cookie for advertising, does not track you across sites, and is not used to build a profile. It loads only on the support page — no other page requests it. Cloudflare's handling of that check is covered by Cloudflare's privacy policy.
The website itself
This site sets no cookies. Nothing here writes one, and there is none to consent to.
The only thing stored in your browser is your light/dark theme preference, written only if you change the theme yourself. Choosing "System" deletes it again. Nothing else on this site reads or writes anything on your device — the analytics described above included, which is the whole reason it can run without a consent banner.
Two Cloudflare resources load from outside this site, and nothing else does: the Web Analytics beacon, on every page, and the Turnstile check, on the support page only. There are no fonts, images, scripts, stylesheets, embeds, or trackers from anywhere else.
The site is hosted on Cloudflare, which processes requests and keeps standard operational logs on its own side, as any web host does.
Tracking
xMosaique does not track you. The app does not use the advertising identifier, does not participate in cross-app or cross-site tracking, and therefore never shows the App Tracking Transparency prompt.
Nor does this website. The analytics described above measure pages, not people: with no cookie, no client-side storage and no fingerprint, there is nothing that could recognise you on a second visit, let alone anywhere else.
Children
xMosaique is not directed at children. The app collects no personal information from anyone, of any age. On this website, the only thing that asks for any is the support form, and only if you choose to write in.
Third parties
- Apple distributes the app through the App Store and provides aggregate, anonymised download and crash statistics to the developer. That is handled entirely by Apple under Apple's privacy policy.
- Google and Microsoft are involved only if you choose to sign in to Google Drive or OneDrive for preset import, as described above.
- Cloudflare hosts this website, measures its page views through Web Analytics, and runs the Turnstile check and the mail delivery behind the support form. It is not involved in the app at all.
No other third party receives anything.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new date at the top. Material changes will also be noted in the app's release notes.
Contact
Questions about this, or about anything above, can go through the support form.