<?xml version="1.0" encoding="utf-8"?>
<!--
  Block both cloud backup and device-to-device transfer of any data.
  Tokens (debrid, Trakt) live in EncryptedFile + Keystore — never back them up.
  Local Room data is preserved for the user but never exported off-device.
-->
<data-extraction-rules>
    <cloud-backup>
        <exclude domain="root" />
        <exclude domain="file" />
        <exclude domain="database" />
        <exclude domain="sharedpref" />
        <exclude domain="external" />
    </cloud-backup>
    <device-transfer>
        <exclude domain="root" />
        <exclude domain="file" />
        <exclude domain="database" />
        <exclude domain="sharedpref" />
        <exclude domain="external" />
    </device-transfer>
</data-extraction-rules>
