Magipal is a desktop application. Your palettes live in a file on your own computer. There is no Magipal account, no Magipal server, and no analytics. It makes exactly two kinds of network request, and both are described below rather than buried.
What stays on your computer
Everything you make. Palettes, folders, colour names, notes, recently used colours, and your settings are saved as plain JSON files in Magipal's application-data directory. You can open that folder and read them; they're not encrypted, obfuscated, or hidden from you.
Nothing in that folder is transmitted anywhere. There is no cloud, no sync, and no account for it to sync to. If you delete those files, the data is gone — I have no copy, because I never had one.
When Magipal uses the network
There are two cases, and no others.
1 · Checking for updates
Every time Magipal starts, it checks whether a newer version exists. This happens automatically, before you do anything, and there is currently no setting to turn it off.
The check downloads a small file from the project's public releases page on GitHub. Magipal sends no information of its own with this request — no identifier, no version history, no usage data, no palette contents. It is an ordinary download of a public file. However, like any request to any website, GitHub can see the IP address it came from, and GitHub's handling of that is governed by GitHub's privacy statement.
If the check fails — because you are offline, or GitHub is unreachable — Magipal stays silent and carries on. It never blocks or interrupts your work. If an update is found, Magipal shows you a dialog; nothing is downloaded or installed unless you choose Update now. The installer is verified against a signing key built into the app before it runs.
2 · Importing a palette from Lospec
Only when you open the Lospec import window, type a palette name, and click Fetch. The request carries the palette slug you typed and nothing else — no account information, no cookies, no custom identifying headers, and none of your own palettes. It is made by Magipal directly rather than through the embedded browser, so no browser cookies or stored site data are attached to it.
Lospec can see the IP address the request came from and which palette was asked for, as with visiting their site in a browser. Their handling of that is governed by Lospec's own policies. Magipal never contacts Lospec on its own — if you never use the import, this request never happens.
Beyond those two, Magipal does not contact any server. It has no analytics, no telemetry, and no third-party SDKs. It does not phone home.
Exporting files
When you export a palette, Magipal opens your operating system's own save dialog and writes the file directly to the location you pick. Nothing is uploaded, and no copy is staged anywhere else first.
One related detail, for completeness: when Magipal saves your own palette library it writes to a temporary file in its application-data directory and then renames it, so that a crash mid-save cannot destroy your data. That temporary file never leaves your computer and is not part of exporting.
Crash reports
Magipal does not collect, generate, or transmit crash reports, stack traces, diagnostics, or telemetry of any kind. There is no error-reporting service built into it.
Magipal cannot make that promise on behalf of your operating system. On Windows, Magipal displays its interface using Microsoft's WebView2 runtime, a system component. WebView2 and Windows itself have their own crash-reporting behaviour, configured by Microsoft and by your Windows settings — Magipal neither enables nor disables it, and cannot see it. If a crash report is produced at that level, it comes from Windows, not from Magipal, and is covered by Microsoft's privacy terms.
Children
Magipal collects no personal information from anyone, of any age.
Your rights
Rights under laws such as the GDPR and the CCPA apply to personal data a company holds about you. I hold none. Your palettes are already in your possession, in a readable format, in a folder you control.
Changes to this policy
If Magipal ever gains a feature that sends data anywhere, this page will be updated before that version is released, and the date below will change.
Contact
Questions go to dev@liminalpalette.com.
Last reviewed against the source code on 20 July 2026, for version 0.9.1.