<?xml version="1.0" encoding="utf-8"?>
<!--
  Backup / transfer policy for JellyTau (API 31+; see android:allowBackup in
  AndroidManifest.xml for API 24-30).

  Nothing is eligible for extraction, from either channel:

  * cloud-backup   - already off via android:allowBackup="false".
  * device-transfer - NOT covered by allowBackup on Android 12+, which is why
    this file exists. A D2D transfer would otherwise copy the same data the
    cloud backup used to.

  Why nothing is extractable:

  * Credentials are unrecoverable off-device. jellytau_secure_prefs holds
    AES-GCM ciphertext encrypted under an Android Keystore key, and Keystore
    keys are never backed up or transferred. Restoring the prefs without the
    key produces ciphertext nothing can read - a silent auth failure that looks
    like a broken app rather than a logged-out one.
  * Everything else is a rebuildable cache. The SQLite catalogue is a mirror of
    the Jellyfin server (library metadata, watch history, offline downloads);
    signing in again reproduces it, and watch state lives on the server anyway.
    Backing it up would export a user's library and viewing history to their
    Google account for no gain.

  Exclude rules are listed per domain rather than relying on "root" alone,
  because database/, shared_prefs/, files/ and external storage are addressed
  as their own domains by the extraction engine.
-->
<data-extraction-rules>
    <cloud-backup>
        <exclude domain="root" />
        <exclude domain="file" />
        <exclude domain="database" />
        <exclude domain="sharedpref" />
        <exclude domain="external" />
    </cloud-backup>
    <device-transfer>
        <exclude domain="root" />
        <exclude domain="file" />
        <exclude domain="database" />
        <exclude domain="sharedpref" />
        <exclude domain="external" />
    </device-transfer>
</data-extraction-rules>
