Box art
Box art comes from the ScreenScraper API and needs your own account. Plumemu looks a game up by checksum or serial first, then by name.
Requests are spaced 1.2 s apart and use as many threads as your account allows, up to four. When the daily limit runs out it waits for ScreenScraper's reset at midnight in Paris. Downloads only run on Wi-Fi, and answers are cached for 30 days.
Your ScreenScraper password is encrypted with AES-256-GCM, using a key kept in the Android Keystore.
Second screen
The bottom screen is an android.app.Presentation on the display that DisplayManager lists as a presentation display. Nothing else in the app depends on it.
Backup
A backup is one zip, saved through Android's save dialog. It holds a manifest, your settings as JSON and the library database. A full backup adds the box art.
Network
Only the box art module declares the INTERNET permission. There are no ads and no Plumemu account, and this version sends no usage statistics.