Privacy Policy
Effective date: April 20, 2026
This Privacy Policy explains how Orro Group handles information for the XAMPP Mobile Android app, package name com.orrogroup.xampp. XAMPP Mobile is a local PHP, MySQL, web server, FTP, and database management tool for Android.
Contact for privacy questions: support@orrogroup.in
Information The App Accesses Or Stores
XAMPP Mobile may access or store the following information on your device:
- Website files, uploads, PHP files, CMS files, and related content that you place in the shared htdocs folder, including /storage/emulated/0/htdocs.
- MySQL database files, server configuration files, logs, runtime files, and temporary files needed to run the local server stack.
- App settings such as selected ports, runtime status, FTP settings, and cached advertising configuration.
- Notification and foreground service status used to keep the server visible while it is running.
This information is stored locally on your device unless you choose to share it, expose a server port, connect with FTP, upload it through your own website scripts, or use another app or service to transfer it.
Permissions And Why They Are Used
- Internet and network access: used for local web server features, FTP/server connections, advertising, and optional remote ad configuration.
- All files access and storage access: used to create, read, and update the public htdocs folder and related project files so you can manage website files with normal Android file managers.
- Foreground service: used to keep user-started server modules running and visible while the app is active in the background.
- Notifications: used to show server status and foreground service information.
- Advertising ID: used by advertising SDKs for ad delivery, frequency capping, measurement, fraud prevention, and related advertising purposes.
Advertising And Third-Party Services
XAMPP Mobile uses third-party advertising services, including Google AdMob and Unity Ads. These services may collect or receive information such as:
- Advertising ID or similar app/device identifiers.
- IP address, approximate location derived from IP address, and network information.
- Device model, operating system version, app version, language, and diagnostics.
- Ad impressions, clicks, views, interactions, crash data, and performance data.
This information may be used to show ads, limit repeated ads, measure ad performance, detect fraud and abuse, provide reporting, and comply with legal obligations. Ad partners process information under their own privacy policies:
- Google Privacy Policy: https://policies.google.com/privacy
- Google AdMob and Google Publisher Policies: https://support.google.com/admob/answer/10502938
- Unity Game Player and App User Privacy Policy: https://unity.com/legal/game-player-and-app-user-privacy-policy
Remote Advertising Configuration
The app may request a remote configuration file controlled by Orro Group to enable or disable ads and update advertising placement IDs. This request does not require an account. Standard web server logs may record technical information such as IP address, request time, browser or app user agent, and requested URL.
Local Servers, FTP, And User Content
XAMPP Mobile can run local server modules such as a web server, PHP, MySQL, FTP, and database administration tools. Files, scripts, databases, and pages that you create or copy into the app are your responsibility. If you start FTP or expose server ports to other devices on your network, other users or devices may be able to access content you make available.
Orro Group does not monitor, moderate, upload, or back up your local server content. You should only host content that you have the right to use and should stop server modules when you do not need them.
How Information Is Shared
Orro Group does not sell your website files, database files, or local project content. Information may be shared in these limited situations:
- With advertising partners such as Google AdMob and Unity Ads for ads and measurement.
- With devices or users that you allow to connect to your local web server or FTP server.
- When required by law, legal process, security, fraud prevention, or to protect rights and safety.
Data Retention And Deletion
Local project files, htdocs files, database files, settings, and logs stay on your device until you delete them, clear app data, uninstall the app, or remove the relevant folders manually. Advertising partners retain data according to their own privacy policies. Server logs for any remote configuration requests may be retained for security, diagnostics, and abuse prevention.
Your Choices
- You can deny or revoke storage, notification, and related permissions in Android settings.
- You can delete website files and database files from the htdocs folder or app storage.
- You can stop server modules when you do not want local services running.
- You can reset or manage your Android Advertising ID and ad personalization choices in Android or Google settings.
- You can uninstall the app to remove app-managed local data, subject to Android storage behavior and any files you placed in shared folders.
Security
We use reasonable measures to keep app-handled information secure. Because this app runs local server software and can serve files from shared storage, your own server configuration, scripts, network, and file permissions affect security. Use strong FTP passwords, avoid untrusted PHP scripts, and do not expose local ports to networks you do not trust.
Children
XAMPP Mobile is intended for developers, students, and website owners. It is not directed to children under 13. If you are under the age required by law in your location, use the app only with permission from a parent or guardian.
International Processing
Advertising partners and hosting providers may process information on servers located in different countries. By using the app, you understand that information handled by third-party services may be processed according to their policies and applicable law.
Changes To This Policy
We may update this Privacy Policy when the app, advertising services, permissions, or legal requirements change. The effective date at the top of this page shows when this policy was last updated.