We collect nothing, and here's the fine print
Last updated . This policy covers the Universal Display Magnet app and this website.
Universal Display Magnet is a macOS app that arranges your displays, windows and Macs. It is made by an independent developer (rolottr) and is not affiliated with Apple.
The short version
Universal Display Magnet does not collect, sell or share any personal data. It has no account, no analytics, no advertising and no tracking. The developer receives nothing from the app.
What the app stores, and where
Everything stays on your Mac, in ~/Library/Application Support/Universal Display Magnet/:
- Arrangements, workspaces and your Macs: your display arrangements, saved workspaces and window layouts, and the other Macs you sync with, in
records.json. - Settings: your preferences, in
settings.json. - Universal Control backups: a copy of the Universal Control arrangement before each change, so it can be put back.
To match windows when restoring, workspaces store each window's app, position, size, Desktop and title. Nothing is captured from the screen: the app never asks for Screen Recording permission.
Network connections
The app makes only two kinds of connection:
- Sync with your own Macs. Only Macs that Universal Control links to this one, found with Bonjour on your local network. Everything they send each other is encrypted end to end between your Macs, with a key derived from the two Macs' own identities. Nothing goes through a server or a cloud.
- Checking for updates. Once a day the app reads this project's latest public release on GitHub. The request sends nothing about you. Turn it off under Settings → Updates → Check Automatically.
Permissions
- Device Control and Data Access (Accessibility on older versions of macOS): to see and move other apps' windows.
- Local Network: to find and sync with your other Macs.
Data collected by the developer
None. No crash reports beyond what you choose to share with Apple through macOS, no usage statistics and no identifiers.
This website
This website uses no third-party scripts and no tracking cookies. It remembers the language you choose in a cookie, and counts visits with Vercel Web Analytics, which is anonymous and cookieless: it records the page, referrer, country, browser, operating system and device type, recognizes a visit by a hash of the request that is discarded after 24 hours, and stores no IP addresses. The site is served by Vercel, which processes standard request logs (such as IP addresses) to deliver and protect it.
Changes and contact
If this policy changes, the new version will be posted here with a new date. Questions? Open an issue on GitHub.