Privacy policy

Blad reads your own files on your own Apple TV. We do not collect information about you or about what you read, and we run no server that sees your files, your passwords or your sign-in keys.

Last updated 12 October 2026. Blad is still in development. This policy describes the app as it works today and is updated whenever that changes.

Who is responsible

Blad is made by HANSEN AI, Norway, which is the data controller for the little personal data that reaches us. Contact: minepassord@gmail.com

What Blad does not do

• No account with us, no analytics, no advertising and no tracking.
• Your files, passwords and sign-in keys are never sent to us. The app talks directly to your storage from the Apple TV.
• Blad only reads. It does not change, delete or share anything in your storage.

What is stored on your Apple TV

• Sign-in details: access keys for cloud services, the password for a shared folder on your home network or for your own server, and the password or API key for an OPDS catalogue, are kept in the Keychain on the device.
• Your library: the list of magazines, e-books and comics Blad may read, their titles, page counts and cover images, kept in the app's cache.
• Downloaded and uploaded files: the files you have downloaded to read or sent to the Apple TV. tvOS may clear this cache when the device runs low on space.
• Reading progress and settings: which page you are on, what you have read, and your reading preferences. The magazines you are reading are also shown in the Top Shelf on the Apple TV Home Screen.
• Trial counter: see Purchases below.

None of this leaves the device, except for the requests the app sends to the storage you have connected and, if iCloud sync is on, what is described under iCloud sync. The one request the app sends to us is described under The guide that comes with Blad.

Your storage

When you connect storage, Blad talks to it directly from your Apple TV to list folders, read details and covers from the files, and download the titles you choose to read. To notice new issues, Blad looks through your sources again from time to time while the app is open: when you return to it, and about every half hour or hour while the library is on the screen. It does not do this while you are reading or while Low Data Mode is on, and Google Drive is not checked this way at all. These are the same read-only requests as when you connected the source. Each service handles your sign-in and your data under its own privacy policy. Blad asks for read access only:

Shared folders on your home network (SMB)

You enter the address, user name and password of the computer or NAS. Blad connects to it over your local network. Nothing goes over the internet.

WebDAV, Nextcloud and S3-compatible storage

You enter the address of your own server and the user name and password (for Nextcloud with two-factor sign-in, an app password), or for S3-compatible storage the endpoint, bucket, access key and secret key. Blad connects straight to that server from the Apple TV, over an encrypted connection (https) unless you enter an http address yourself. The password or secret key is kept in the Keychain.

OPDS catalogues (Komga, Kavita, Calibre, Calibre-Web)

You enter the address of your own server and a user name and password, or an API key. Blad connects straight to that server from the Apple TV, over an encrypted connection (https). Without encryption it connects only to a server on your home network. Blad only reads: it lists the catalogue and downloads the titles you open, and it sends no reading progress and nothing else about what you read to the server.

The password or API key is kept in the Keychain and is sent only to the catalogue's own server. If the address of the catalogue has an API key in it, as Kavita's has, the key is taken out before the address is stored in the list of sources, on the device and in iCloud. The key itself is kept in the Keychain like a password.

OneDrive

You sign in with Microsoft on your phone or computer, using a code shown on the TV. Blad asks for Files.Read (read your files), offline_access (stay signed in) and User.Read (your name and account address, shown so you can see which account is connected).

With a work or school account, the source has a row called Shared Libraries. Only if you choose it, and sign in once more on Microsoft's page, does Blad ask for one more permission: Sites.Read.All, which lets it list and read the document libraries you yourself have access to in SharePoint and Teams. Blad uses it to show those libraries, so you can choose folders in them, and to download what you open. If you never choose that row, the permission is never requested, and it is never requested for a personal account. Your organisation may refuse it; your own files then work as before.

Dropbox

You approve Blad on Dropbox's own page, which you open by scanning a QR code on the TV. Blad asks for account_info.read (your name and email address, to show which account is connected), files.metadata.read (list files and folders) and files.content.read (download files). If your account belongs to a team with a shared team space, the same permissions let Blad list the team folders you have access to, next to your own.

So that you do not have to type anything on the TV, Dropbox sends your phone to blad.app/dropbox/ after you approve, with a one-time code and a random value that identifies your TV's attempt. The page passes the two on to a small relay on our website, removes them from the address bar, and tells you to look at the TV. Your Apple TV fetches the code from the relay and exchanges it with Dropbox directly. The code gives no access to your Dropbox on its own: it only works together with a secret that is created on your Apple TV and never leaves it, so the sign-in keys are created on the Apple TV and are never seen by the relay or by us.

The relay stores the code until the TV has fetched it, which normally takes a few seconds, and for no more than ten minutes. It can be fetched once and is then deleted. The relay does not write the code to any log of ours, sets no cookies, and stores nothing else. As for any web page, the address your phone requests, which here includes the one-time code, can appear in the ordinary server logs of our web host (see This website). If you choose “Enter Code Instead” on the TV, Dropbox shows you the code and you type it in yourself; our website is then not involved.

Google Drive

You sign in with Google on your phone or computer, using a code shown on the TV. Blad asks for one permission, drive.file, which lets it see only the files you pick yourself in Google's file picker, and nothing else in your Drive. Blad reads those files and never changes them. From Google it also reads your account's email address or name, to show which account is connected.

To pick files, the TV shows a QR code that opens blad.app/google/ on your phone. That page sends you on to Google's file picker, and Google returns you to /google/valgt.html, which only tells you how many files were picked. The picked files then become visible to the app on your Apple TV directly from Google. The return address from Google contains a code; our page does not use it, does not store it, and removes it from the address bar straight away. The page sets no cookies. During the selection it keeps one random value in your browser's sessionStorage, to check that the answer belongs to your attempt, and removes it afterwards.

As with any web page, the addresses your phone requests can appear in the ordinary server logs of our web host (see This website). For these two pages, the address can include the IDs of the files you picked and the unused code. The email address of your Google account, which the TV passes along so Google suggests the right account, is placed after the # in the address and is not sent to our web host.

Blad's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In practice: the data is used only to show and open your magazines on your Apple TV, and it is not transferred to anyone.

pCloud

You approve Blad on pCloud's own page, which you open by scanning a QR code on the TV. Blad is registered with pCloud with read access to all folders in your account, and without write access. It lists your folders and files, reads the PDFs, and reads your account's email address to show which account is connected. Blad cannot change, delete or share anything in pCloud.

pCloud has no sign-in made for TVs, so the sign-in goes through a page on our website. The QR code opens blad.app/pcloud/ with two values after the # in the address: a random value that identifies your TV's attempt, and a public encryption key that your Apple TV has created for this one attempt. What comes after the # is not sent to our web host. The page keeps the two values, and one random value of its own for checking that pCloud's answer belongs to your attempt, in your browser's sessionStorage while you are at pCloud, and removes them afterwards. The page sets no cookies.

After you approve, pCloud sends your phone back to the same page with the access key to your account after the # in the address. The page removes it from the address bar straight away and encrypts it in your phone's browser, to the public key from your Apple TV. Only your Apple TV has the matching private key, and it never leaves the TV. The page then passes only the encrypted value, together with the random value that identifies the attempt, to a small relay on our website. Your Apple TV fetches the encrypted value from the relay and decrypts it. The relay, our web host and we only see the encrypted value and cannot read the access key.

The relay stores the encrypted value until the TV has fetched it, which normally takes a few seconds, and for no more than ten minutes. It can be fetched once and is then deleted. The relay does not write it to any log of ours, sets no cookies, and stores nothing else. The page itself is delivered by our web host like any other page (see This website).

The access key is kept in the Keychain on the Apple TV and is sent only to pCloud. To withdraw Blad's access, remove the source in Blad, and remove Blad under Settings → Linked Accounts → Linked Apps at my.pcloud.com.

Uploading from your phone or computer

While the upload screen is open, the Apple TV runs a small web server on your home network. The QR code on the TV opens a page served by the Apple TV itself, and the files go straight from your phone or computer to the Apple TV. Nothing goes over the internet or through us.

The transfer uses plain, unencrypted HTTP inside your home network. A random code in the address keeps other devices on the network from uploading by guessing, and the server stops as soon as you leave the screen. Use it on a network you trust.

iCloud sync

If your Apple TV is signed in to iCloud, Blad keeps your devices in step through your own iCloud account. It is on by default and can be turned off in the app under Settings.

• In your iCloud key-value storage: the list of sources you have added (kind of source, address, shared folder, account name and chosen folder, but never passwords or sign-in keys, and an API key in the address of an OPDS catalogue is removed first), your reading progress, the place you stopped in e-books, your bookmarks, highlights and notes in e-books (with the text you highlighted), the magazines you have removed from the library, which titles you have opened during the free trial (as anonymous fingerprints, so the five free titles count across your devices), and your reading theme, text size and sort order. So that two devices do not overwrite each other, each device stores its part under a random number of its own. The number is made by the app, says nothing about the device, and is used for nothing else.
• In iCloud Keychain: the passwords and sign-in keys for your sources, so you do not have to sign in again on each device. iCloud Keychain is end-to-end encrypted by Apple and only works if you have turned it on.

This data is stored by Apple in your iCloud account under Apple's privacy policy. It never passes through us, and we cannot see it. To stop syncing, turn off iCloud sync in Blad. To remove what is stored, remove your sources in Blad, or manage Blad's data under iCloud in the Settings of an iPhone, iPad or Mac signed in to the same account.

Purchases

The first five titles you open are free. After that, Blad is a one-time in-app purchase. The purchase is handled by Apple under Apple's privacy policy. We never receive your name, your payment details or your Apple Account; the app only learns from the App Store, on the device, whether it has been bought.

To count the free titles, the app keeps a short fingerprint of each one you have opened (computed from its title, page count and file size) in the Keychain on the device. It stays on the device and may remain there if you delete and reinstall the app.

The guide that comes with Blad

Blad comes with a short magazine about the app itself, “Issue One”, so there is something in the library from the start. To keep it current without an app update, the app asks blad.app whether there is a newer edition: it fetches a small list and, only when there is a new edition, one PDF. It asks at most once a day (after an attempt that got no answer, it may try again an hour later), and not at all while Low Data Mode is on.

The request is an ordinary download of a fixed file. It carries nothing about you, your library or what you read, no cookies and no identifier. The only details it adds are the language of the edition and the name “Blad” as the user agent, without version or device. Netlify, which hosts this website, sees the request as it sees a visit to the website and keeps the same ordinary server logs: IP address, time and the address fetched, which shows whether the edition is for Apple TV or iPad and in which language. We do not use this for analytics. If you remove the guide from your library, the app stops asking. You can bring it back under Settings.

This website

This website uses no cookies and no analytics. The front page may send you on to the version in your language, based on the language your browser asks for or the country the request comes from; nothing about that choice is stored. It is hosted by Netlify, which keeps ordinary server logs (such as IP address, time and the address requested), and the typeface it uses is served from our own site, so your browser contacts no one else to show it.

If you email us

We use your email address and what you write only to answer you, and we do not keep the correspondence longer than needed for that.

Your rights

Under the GDPR you have the right to ask what personal data we hold about you, to have it corrected or deleted, to object to its use, and to complain to a data protection authority: in Norway Datatilsynet, or the authority where you live. In practice, almost everything Blad stores is on your own Apple TV and under your own control, and we hold nothing about you unless you have emailed us. Write to minepassord@gmail.com and we will help.

Deleting your data

• Remove a source in Blad: this deletes its sign-in key or password, its file list, its covers and the files downloaded from it.
• Delete the app: this removes the library, the downloaded and uploaded files, reading progress and settings. Remove your sources first, since tvOS can keep Keychain items after an app is deleted.
• Withdraw Blad's access at the service: Microsoft, Dropbox, Google or pCloud. Step-by-step help is on the support page.

Blad on iPad

A version of Blad for iPad is on its way. It works the same way as on Apple TV: the app reads your files directly from your own storage, and what this policy says about the Apple TV applies to the iPad too. Upload from a phone or computer also works the same way: the address only listens on your home network, and only while that screen is open. Three things differ:

• Files from the Files app are copied into Blad and stay on your iPad until you delete them in the app.
• Signing in to cloud services opens in a system sign-in window on top of the app. It shares the sign-ins you already have in Safari, and Blad sees neither your password nor what you type there.
• Looking things up in e-books: when you touch and hold a word and choose Look Up or Translate, iPadOS shows the dictionary and the translation, under Apple's privacy policy. If you choose Wikipedia, a search for the word opens at Wikipedia in a browser window. None of this is sent to us.

For e-books, Blad remembers the place you stopped, and the bookmarks, highlights and notes you make. They are stored on the device and, if iCloud sync is on, in your own iCloud. The reading speed Blad measures to estimate the time left in a book stays on the device.

Changes

When the app changes in a way that affects this policy, for example when a new storage service is added, we update this page and the date at the top.