Noctalia
Get started

Privacy Policy

Last updated: June 27, 2026

We believe that open source software should be transparent about what it does. This policy describes exactly what data Noctalia collects or accesses, why we collect or access it, and how we handle it.

Core principles

  • Telemetry is opt-in: Telemetry is disabled by default. You choose whether to enable it.
  • API access logs are disabled: We do not keep server access logs for api.noctalia.dev. Opt-in telemetry is stored separately as telemetry records, not as access logs.
  • Calendar access is optional: Google Calendar access is used only when you connect your Google account.
  • Automatic location is optional: IP-based location lookup is used only when you enable auto-location.
  • Calendar data stays local: Noctalia reads calendar data locally on your device. Calendar content is not sent to or stored on Noctalia servers.
  • Short telemetry retention: Telemetry data is kept for a maximum of 30 days, then permanently deleted.

Telemetry data we collect

When you opt in to telemetry, we collect:

  • Instance ID: A random identifier to distinguish installations (not tied to your identity).
  • Version: Noctalia version.
  • System info: Compositor (e.g., Niri, Hyprland), OS name and version, total RAM.
  • Monitor info: Resolution (width, height) and scale factor for each connected monitor.
  • UI settings: Scale ratio and font scale factors.

Why we collect telemetry

Telemetry helps us make better decisions about Noctalia development:

  • Compositor & OS data: Helps us prioritize support and testing for the most used environments.
  • Monitor & UI settings: Helps us understand real-world display configurations and optimize layouts.
  • Version info: Helps us track adoption of new releases and identify upgrade issues.

What telemetry does not collect

  • Personal information (name, email, IP address, location).
  • File contents, feature usage, or keystrokes.
  • Any data that can identify you personally.

Telemetry storage & retention

  • Opt-in telemetry records are stored securely in a telemetry database at noctalia.dev on our private bare metal server hosted at OVH - Canada.
  • The telemetry database is separate from server access logs. Server access logs are disabled for api.noctalia.dev.
  • Data is automatically deleted after 30 days.
  • We do not share or sell telemetry data to third parties.

Google Calendar OAuth

The Google Calendar integration is optional and requires you to sign in with Google and approve the requested calendar permissions.

  • Noctalia reads your Google Calendar data locally on your device to display calendar information in the shell.
  • Our OAuth broker at api.noctalia.dev only relays OAuth tokens required to complete the Google sign-in and token refresh flow.
  • For Google Calendar OAuth, api.noctalia.dev stores nothing: it does not store OAuth tokens, Google account details, or calendar content.
  • No calendar content, including event titles, descriptions, attendees, locations, times, or calendar lists, is sent to or stored on Noctalia servers.
  • Calendar data is not used for telemetry, analytics, advertising, or sold or shared with third parties.

Automatic location lookup

Noctalia can optionally use approximate location to support weather, night light, and automatic theme schedules. This is controlled by the auto_locate setting and is disabled unless you enable it.

  • When auto-location is enabled, Noctalia contacts api.noctalia.dev to resolve approximate coordinates from the request IP address.
  • The IP address is used transiently to answer the lookup request. It is not added to telemetry and is not stored by the auto-location service.
  • Noctalia does not keep server access logs for api.noctalia.dev, including auto-location requests.
  • Auto-location requests are not used for analytics, advertising, or sold or shared with third parties.

Your control

  • You can disable telemetry at any time in Noctalia settings.
  • You can disconnect Google Calendar in Noctalia or revoke Noctalia's access from your Google Account at any time.
  • The telemetry module is fully open-source and auditable in our GitHub repository.

Right to deletion

You have the right to request deletion of telemetry data associated with your Instance ID at any time. Contact us on Discord with your Instance ID and we will remove that telemetry data from our servers. Noctalia servers do not store Google Calendar content or OAuth tokens, so there is no calendar data to delete from Noctalia servers.

Contact

For questions or concerns, open an issue on our GitHub repository.