Privacy Policy

Last updated: May 30, 2026

We believe that open source software should be transparent about what it does. This policy describes exactly what data Noctalia Shell collects or accesses, why we collect or access it, and how we handle it.

Core principles

  • Telemetry is opt-in: Telemetry is disabled by default. You choose whether to enable it.
  • Calendar access is optional: Google Calendar access is used only when you connect your Google account.
  • Calendar data stays local: Noctalia Shell reads calendar data locally on your device. Calendar content is not sent to or stored on Noctalia servers.
  • Short telemetry retention: Telemetry data is kept for a maximum of 30 days, then permanently deleted.

Telemetry data we collect

When you opt in to telemetry, we collect:

  • Instance ID: A random identifier to distinguish installations (not tied to your identity).
  • Version: Noctalia Shell version.
  • System info: Compositor (e.g., Niri, Hyprland), OS name and version, total RAM.
  • Monitor info: Resolution (width, height) and scale factor for each connected monitor.
  • UI settings: Scale ratio and font scale factors.

Why we collect telemetry

Telemetry helps us make better decisions about Noctalia Shell development:

  • Compositor & OS data: Helps us prioritize support and testing for the most used environments.
  • Monitor & UI settings: Helps us understand real-world display configurations and optimize layouts.
  • Version info: Helps us track adoption of new releases and identify upgrade issues.

What telemetry does not collect

  • Personal information (name, email, IP address, location).
  • File contents, feature usage, or keystrokes.
  • Any data that can identify you personally.

Telemetry storage & retention

  • Telemetry data is stored securely at noctalia.dev on our private bare metal server hosted at OVH - Canada.
  • Data is automatically deleted after 30 days.
  • We do not share or sell telemetry data to third parties.

Google Calendar OAuth

The Google Calendar integration is optional and requires you to sign in with Google and approve the requested calendar permissions.

  • Noctalia Shell reads your Google Calendar data locally on your device to display calendar information in the shell.
  • Our OAuth broker at api.noctalia.dev only relays OAuth tokens required to complete the Google sign-in and token refresh flow.
  • For Google Calendar OAuth, api.noctalia.dev stores nothing: it does not store OAuth tokens, Google account details, or calendar content.
  • No calendar content, including event titles, descriptions, attendees, locations, times, or calendar lists, is sent to or stored on Noctalia servers.
  • Calendar data is not used for telemetry, analytics, advertising, or sold or shared with third parties.

Your control

  • You can disable telemetry at any time in Noctalia Shell settings.
  • You can disconnect Google Calendar in Noctalia Shell or revoke Noctalia's access from your Google Account at any time.
  • The telemetry module is fully open-source and auditable in our GitHub repository.

Right to deletion

You have the right to request deletion of telemetry data associated with your Instance ID at any time. Contact us on Discord with your Instance ID and we will remove that telemetry data from our servers. Noctalia servers do not store Google Calendar content or OAuth tokens, so there is no calendar data to delete from Noctalia servers.

Contact

For questions or concerns, open an issue on our GitHub repository.