MagnaDesk Privacy Policy
1. Overview
MagnaDesk is a desktop application for Windows. We are committed to your privacy. Catio Productions does not collect, transmit, or store any personal data on our servers. All data MagnaDesk uses stays on your computer.
2. Data We Do Not Collect
MagnaDesk does not collect or transmit to Catio Productions:
- Your name, email address, or any account credentials
- Your location
- Usage analytics or telemetry
- Crash reports
- Any content from your connected accounts (mail, calendar, tasks, notes)
MagnaDesk does not contain advertising, third-party trackers, or analytics SDKs. No outbound network traffic is generated by MagnaDesk except as described in Sections 3 and 8 of this policy.
3. Account Integrations
MagnaDesk widgets can connect to Microsoft 365 and Google accounts to display your own data on your desktop canvas. All access is initiated by you via the standard OAuth 2.0 sign-in flow operated by Microsoft or Google. MagnaDesk never sees your password.
3.1 Microsoft Graph (for Microsoft account widgets)
When you connect a Microsoft 365 / Outlook account, MagnaDesk requests these Microsoft Graph scopes:
| Scope | What it allows | Where it is used |
|---|---|---|
User.Read | Read your basic profile (name, email) to label the connected account in the widget header | All Microsoft widgets |
Mail.Read | Read-only access to messages in your mailbox | Mail widget |
Calendars.Read | Read-only access to events in your calendars | Calendar widget |
Tasks.Read | Read-only access to your To-Do task lists | To-Do widget |
Notes.Read | Read-only access to your OneNote notebooks | OneNote widget |
offline_access | Issue a refresh token so you don't have to sign in every session | All Microsoft widgets |
MagnaDesk never sends, modifies, or deletes Microsoft Graph data. All requests are read-only.
3.2 Google APIs (for Google account widgets)
When you connect a Google account, MagnaDesk requests these Google API scopes:
| Scope | What it allows | Where it is used |
|---|---|---|
https://www.googleapis.com/auth/userinfo.emailhttps://www.googleapis.com/auth/userinfo.profile |
Read your basic Google profile (name, email) to label the connected account in the widget header | All Google widgets |
https://www.googleapis.com/auth/calendar.readonly |
Read-only access to your Google Calendar events | Calendar widget |
https://www.googleapis.com/auth/tasks.readonly |
Read-only access to your Google Tasks lists | Tasks widget |
MagnaDesk never sends, modifies, or deletes data in your Google account. All requests are read-only.
4. Limited Use of Google User Data
MagnaDesk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, MagnaDesk does not:
- Use Google user data to serve advertisements.
- Transfer Google user data to others except as necessary to provide or improve user-facing features that are prominent in the application's user interface.
- Allow humans to read Google user data, except (a) with the user's affirmative consent for specific messages, (b) when necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data has been aggregated and anonymized for internal operations.
- Sell Google user data.
5. Account Tokens — Storage and Encryption
When you connect a Microsoft or Google account, MagnaDesk stores the resulting OAuth access token and refresh token on your local machine, encrypted using Windows Data Protection API (DPAPI) at the current-user scope. This means the tokens can only be decrypted by your Windows user account on your computer.
Tokens are stored in %AppData%\MagnaDesk\ and are used solely to make read-only requests to Microsoft Graph or Google APIs on your behalf. Tokens are never transmitted to Catio Productions or any third party other than the respective Microsoft or Google authentication and resource servers.
6. Local Caching of Account Data
To keep widgets responsive and to allow brief offline display, MagnaDesk may cache the most recently fetched items shown by each widget in %AppData%\MagnaDesk\. Cached account data is encrypted with Windows DPAPI at the current-user scope. The cache is short-lived: each widget refreshes its cached entries on its normal refresh interval and on application startup.
Cached account data is automatically deleted when you disconnect the corresponding account in MagnaDesk Settings or when you uninstall MagnaDesk.
7. Data Retention and Deletion
OAuth tokens and any cached widget data are retained on your local machine until one of the following happens, at which point they are deleted from disk:
- You remove the account in MagnaDesk Settings (the Disconnect action clears tokens and the widget cache for that account).
- You uninstall MagnaDesk (all data under
%AppData%\MagnaDesk\is removed). - You revoke MagnaDesk's access on the provider side (revoked tokens are discarded the next time MagnaDesk attempts to use them).
You can revoke access at any time without going through MagnaDesk:
- Microsoft: Microsoft account permissions
- Google: Google account permissions
Because Catio Productions does not receive or store any of your account data on our servers, there is no server-side deletion request needed — clearing the data on your local machine is the complete deletion process.
8. Weather and Radar Widgets
The Weather and Radar widgets work worldwide and require no account. Both display conditions for a location you choose manually — MagnaDesk does not access or detect your device's location.
The city name you enter is sent to the Open-Meteo geocoding API to resolve coordinates, which are then used to fetch forecast data from Open-Meteo. Open-Meteo is a free, open-source weather service that does not require an account or API key. Their privacy policy is available at open-meteo.com/en/terms.
The Radar widget fetches public radar imagery for the coordinates you have chosen. Radar data is powered by LibreWXR, the map underneath it comes from Esri World Street Map, and radar tiles for Italy are provided by Radar-DPC. These requests contain only the map coordinates and zoom level needed to draw the tiles — no account information, no device identifiers, and no personal data.
9. Wallpaper Sources
MagnaDesk does not connect to any image search APIs. The Sources tab in the Wallpaper panel is a static help screen with hyperlinks to free wallpaper websites (Unsplash, Pexels, Wallhaven). Clicking a link opens the site in your default browser. Any browsing, searching, or downloading you do on those sites is between you and that site — MagnaDesk is not involved and does not see what you do there.
10. Local Storage Summary
MagnaDesk stores the following on your computer in %AppData%\MagnaDesk\:
- Application settings and preferences
- Canvas items (sticky notes, drawings, photos, widgets, layout)
- Wallpaper configuration
- Encrypted OAuth tokens (Section 5)
- Encrypted widget caches, if any (Section 6)
- License information
None of this data leaves your computer unless you explicitly copy or share it.
11. Children's Privacy
MagnaDesk is a general-purpose desktop productivity application and is not directed to children under the age of 13. Catio Productions does not knowingly collect personal information from children under 13. If you believe a child has provided personal information to MagnaDesk through a connected Microsoft or Google account, please contact us at the address below and we will help you ensure the relevant local data is removed.
12. Changes to This Policy
If this policy changes in a meaningful way, we will update this document and revise the date at the top of the page. For material changes affecting how account data is handled, we will additionally surface a notice within MagnaDesk on next launch. Continued use of MagnaDesk after a policy update constitutes acceptance of the revised policy.
13. Contact
Questions, requests, or concerns about this privacy policy can be sent to [email protected].