Privacy Policy

Who we are

Magpie is made by Dominique Degottex, a sole proprietor trading as "Motherlode Lab", 9462 Ploenchit Road, Apt 917, Pattaya, Pathum Thani 49981, Thailand. We are the data controller for the processing described here. For everything — support, your rights, security reports — email [email protected] or call +66-31-425-7198.

The short version

There is no Magpie account and no Magpie server: your research never reaches us, so we cannot read, lose, or sell it.

This website has no cookies, no analytics, and no tracking.

The only personal data held about you is what a licence check needs — your purchase and licence details — and it sits with Polar, our payment provider, not with us.

What the Magpie app sends, and to whom

Update check (optional, off-able): the app asks our release feed — a file on GitHub — whether a new version exists. It sends a User-Agent naming the app; GitHub sees your IP address as with any web request.

Licence checks: to verify your licence, the app sends your licence key, a device activation id, and a device label (your computer's name and operating system) to Polar, our payment provider, about once a day. Polar sees your IP address. Nothing about your runs, pages, or reports is sent for licensing.

Page fetches: every page the app reads is fetched directly from your computer to the site you named or a search returned. For some sites the app uses the site's own public API instead.

Saved logins: only if you opt in per website, the app reads pages with your own saved login for that site. Those cookies go only to the site the login belongs to.

AI and search: page text goes to the AI provider you choose, with your own API key, under your contract with that provider. Search queries go to the search engine you choose. Text read with a saved login is never used as a search query.

Webhooks: if you add webhook endpoints, the app sends them the change notifications you asked for.

Optional browser: if no installed Chrome or Edge is found and you press Download, the app fetches a Chromium browser from public CDNs.

That is all. No account, no analytics, no telemetry, no crash reporting, no ads.

What stays on your computer

Your runs, page text, quotes, reports, settings, and saved logins are stored locally: credentials in the operating system's keychain where available, or in encrypted (AES-GCM) files; research data in a local database on your disk, like any local notes app.

Deletion is yours: Research → Recent → Forget deletes a run with every page copy it stored and zeroes the deleted text in the file. Deleting the app's data folder or uninstalling removes the rest. Nothing is synced, so nothing comes back.

This website

The site is static and carries no cookies, no analytics, and no tracking. Our host keeps short-lived technical request logs (IP address, time, requested file) for security and abuse prevention.

Buying a subscription happens on Polar's checkout; Polar's own privacy policy applies to the purchase, and Polar is the controller for the payment data it collects.

Why we process data (legal bases)

Licence checks: to perform our contract with you (GDPR Art. 6(1)(b)). Update check: our legitimate interest in a secure, current installation (Art. 6(1)(f)) — it is optional and you can switch it off.

As a Thai business we also follow Thailand's Personal Data Protection Act (PDPA, B.E. 2562): we process personal data only for the purposes stated in our notice, and we keep this notice current.

Who we share with

Polar (merchant of record): your purchase, licence key, activation id, device label, and IP address — for licensing and payment only.

Your AI provider and search engine: the content and queries you send them, under your own accounts.

Nobody else. We never sell personal data.

International transfers

We operate from Thailand. Licence data goes to Polar in the United States under its data processing agreement, which uses the EU Standard Contractual Clauses. Your AI and search traffic is between you and those providers under your accounts.

How long we keep things

Your research data: on your computer until you delete it — we hold no copy. Licence records: with Polar as long as your subscription and applicable tax law require. Support email: as long as needed to resolve your question, then deleted.

Your rights

EU/UK (GDPR): access, correction, deletion, portability, restriction, objection, and the right to complain to your data protection authority.

Thailand (PDPA): access, correction, and the right to complain to the Personal Data Protection Committee (PDPC).

Because almost none of your data is held by us, most requests are best answered by deleting locally or managing your subscription in Polar's portal. For anything else, email [email protected].

Children

The app is not for anyone under 18, and we knowingly collect no data from children.

Security

The app has no central database to breach. On your machine, credentials are sealed with AES-GCM or kept in the OS keychain. Found a security issue? Email [email protected].

Changes

If this policy changes materially, the app tells you at launch and the date above changes. The licence terms for the app are the End-User Licence Agreement you accept at first launch.