Extension version 1.6.3 · Effective October 28, 2026
GentleDesk (project name: DeskAssit) replaces the Chrome new tab page with a personal desktop for shortcuts, tasks, calendars and information cards. This policy covers the extension, its web version and the optional macOS / Windows companion.
| Data | Use and retention |
|---|---|
| Shortcut names and URLs, groups, layout, appearance, language, greeting and search preferences | Display and personalize your desktop. Stored in Chrome local storage, or the web site's local storage. Optional Chrome sync is described below. |
| Task names, notes, dates, priorities, status and progress | Display My tasks in board and Gantt views. Stored locally, included in desktop JSON backups and eligible for explicitly enabled Chrome sync. Search filters task names locally. |
| Shortcut launch counts and last launch times | Recorded only if you enable frequently used shortcuts. Counts launches from GentleDesk, not general browsing history. Stored locally, excluded from sync and backups, and cleared when the option is disabled. |
| API endpoint URLs, field mappings, refresh intervals and AI prompt text | Configure cards and send requests to your chosen HTTPS services after consent and domain authorization. Configuration is persistent and may be included in backups or optional sync. Prompt text is user-provided content and can contain personal information. |
| Bearer tokens and API / AI results | Tokens authenticate requests only to your configured endpoint; results display in the relevant card. Extension tokens and results use Chrome session storage. Web tokens and results use page memory. They are not saved in persistent configuration, logs, backups or sync. Ending the browser session clears extension session data; refreshing or closing the web page clears its memory. |
| Local file / app names, types, icons and opaque references | Available only after connecting the separate companion and choosing folders or items. Stored locally to display and open shortcuts. The companion stores selected paths and macOS security bookmarks. These records are not sent to API or AI cards, synced or included in desktop backups. Ordinary file and app integration does not read document contents or modify original files. |
| Local search terms, file names and locations | Search only explicitly selected folders, folders you have added, and known app locations such as macOS Applications or Windows Start Menu. Results support local suggestions and opening items. Background result references expire after at most 60 seconds. Searches do not read document body text and are not sent to online cards, AI or calendars. |
| Calendar event titles, times, reminders, locations, notes and source names | Local events and selected external calendar caches stay on the device for calendar display and reminders. They are not automatically sent to AI or included in desktop JSON backups or Chrome sync. Local events can be exported separately as ICS. Disconnecting a source removes its local cache, not the original remote events. |
| Private ICS subscription URLs and Google OAuth tokens | Full private subscription URLs use extension session storage or web page memory. Reconnect after the session ends. Calendar names, service origins and last event caches can remain locally. If a publisher enables Google OAuth in a configured build, Chrome's identity API manages tokens; GentleDesk does not request your Google password or write tokens to backups or configuration. The supplied default build has no Google OAuth client and keeps direct OAuth connection disabled. |
| Tab titles, URLs and tab state | Read locally only after you enable tab management and grant optional tabs permission, for listing, search, protection, discarding, waking and shortcut reuse. GentleDesk does not read page bodies or browsing history. Temporary records store IDs and timestamps rather than full titles or URLs. Disable the feature to clear its policies and revoke tabs permission. Tab records are excluded from sync and backups. |
| Public macroeconomic observations and update preferences | A public data snapshot is bundled. If you enable online updates, public observations and retrieval dates are cached locally. These contain no account data and are not included in desktop backups. Pause updates to stop requests; resetting removes the cache and disables updates. |
API and AI cards: requests go to HTTPS endpoints you enter and authorize, not a GentleDesk relay server. AI requests contain the prompt you wrote; your local files, calendar and other cards are not automatically attached. Provider fees and the provider's own privacy terms may apply. Requests omit cookies and reject redirects. Removing a card clears its token and results; domain permission is removed when no remaining connected card or calendar needs it.
Web search and links: submitting a web search sends that query to your selected Bing, Google or Baidu provider. Opening a shortcut or footer link contacts that destination. The preinstalled Tools shortcut and footer link do not make automatic visits or add click tracking.
Apple Calendar and Reminders: require the separate macOS companion and system permission you approve. System access is database-wide; GentleDesk caches and manages only calendars and reminder lists you select. Source / account labels, event details and reminder names, dates, notes and completion state stay locally. Confirmed edits or deletions are written to the selected system source. Apple / iCloud handles its own account sync and notifications. Disconnecting removes selection records and extension caches without deleting original events or reminders. Revoke system access separately in macOS Privacy & Security.
Windows local calendars: the companion reads only classic Outlook calendars or local ICS files you explicitly select. Local ICS files must be read to parse events. The connection is read-only; no Outlook email, contacts or passwords are read. Selected paths stay in the companion's user-specific configuration, while the extension receives opaque references and calendar data. New Outlook is not supported through this COM connection. Disconnecting removes selections and caches, not original calendars or files.
Native installers: personalized ZIP packages are generated locally with the current extension ID. That ID is not uploaded for personalization. Installation registers the exact ID for the current user. Homebrew / GitHub downloads may produce normal download logs; the extension ID is passed only to a local setup command. The extension does not automatically install Homebrew, run a terminal or bypass system installation approval.
Macro updates: after explicit opt-in and exact-origin permission, requests retrieve public data from the New York Fed, US Treasury, TreasuryDirect, Investing.com and IMF. No account information, cookies or other card data is attached. While the page is visible, updates are attempted about every six hours. Sources may log ordinary network requests. The web version is also subject to CORS.
Sync requires consent covering web shortcuts, groups, information-card configuration and prompt text, tasks, and appearance / search preferences. The extension writes compressed settings to Chrome storage.sync; Chrome transfers them through your signed-in browser account when browser sync is enabled. Other devices need the same account and extension ID. No separate GentleDesk login or Google Drive authorization is used.
Local desktop files and paths, directory permissions, desktop wallpaper and layout, calendars, subscriptions, tokens, results, launch counts and tab records are excluded. Restored cards need fresh authorization. Existing local content and conflicts require a choice instead of silent replacement; a local pre-restore recovery copy is retained. A successful write is not proof that Chrome has delivered it to another device. Pausing sync or resetting this device does not delete the already synced copy in your Google / Chrome account.
The supplied manifest does not request identity, history, cookies, website content injection, browser management or screen-recording permission. A separately configured Google OAuth build would additionally request identity for calendar authorization. All executable UI and extension code is bundled; API responses are treated as data, not remote executable code.
Desktop JSON export includes web shortcuts, tasks, preferences and API configuration, possibly including your endpoint URLs and prompt text. Keep your export secure. Tokens, results, launch counts, local file / app entries and calendar records are excluded. Restoring a backup does not automatically authorize online cards.
You can edit or delete tasks and cards, disable launch ranking or tab management, disconnect calendars or the desktop, revoke permissions, or use Clear and reset in Settings. Disconnecting the desktop removes extension-side local items and attempts to clear companion records. If the companion is unavailable, use its separate uninstaller to remove its configuration. Original files and calendars are preserved.
Uninstalling the extension removes its local extension storage; the optional companion must be uninstalled separately. Web users can clear site storage in browser settings. Synced Chrome account copies are governed by Chrome's sync controls. GentleDesk has no developer-operated user-data account to delete remotely. Hosting providers for independently deployed web versions may retain ordinary access logs under their own policies; their operator must provide the applicable hosting disclosures.
Data is used only for disclosed, visible desktop functions, not advertising, sale, creditworthiness or unrelated profiling. If Google API access is enabled in a configured build, its use and transfer follow the Google API Services User Data Policy, including Limited Use. Calendar data is used only for visible calendars and explicitly confirmed writes, not ads or training general AI models. Remove Google authorization at Google account connections when applicable.
Simple mode and learning templates simplify navigation; they are not parental controls, age verification or content filtering. We do not actively collect children's identity information through the product.
For product support, privacy or data questions, contact taihushuicao_lu@qq.com. Independently hosted web versions should also identify their operator's support channel.
This policy website is published by the GentleDesk operator using GitHub Pages. GitHub logs and stores visitors’ IP addresses for security purposes, including visits without a GitHub login. This concerns visits to this website and does not mean the extension uploads your desktop data to GitHub. See the GitHub Privacy Statement. Contact: taihushuicao_lu@qq.com.