ENES
GitHub
EnglishEspañol
Install it free

Legal

Privacy policy

Last updated: 9 October 2026

Marco is an open source family wall calendar and photo display. This policy explains what data is involved when you use the Marco software, this website (marcohome.app) and the hosted service Marco Cloud (app.marcohome.app). We keep it short and plain on purpose. If anything is unclear, write to hello@marcohome.app.

Who we are

The data controller for this website, the Marco Cloud waitlist and Marco Cloud is the person who runs the Marco project:

  • Name: to be published here before launch
  • Postal address: to be published here before launch
  • Email: hello@marcohome.app

Until these details appear here, you can reach the controller at the email address above for any privacy request.

Self-hosted Marco

When you install Marco on your own Raspberry Pi, server, NAS or Docker host, or deploy it to your own Cloudflare account, all of its data lives on that machine or in that account: settings, calendar addresses, Google tokens, photos, events, backups and logs. We do not receive any of it. Marco has no telemetry, no analytics and no account with us.

A self-hosted install only connects to the services you configure: the calendars you add (for example Google Calendar or iCal feeds), the weather service Open-Meteo, the news feeds you add, Home Assistant if you connect it, and stock photo providers (picsum.photos) if you choose stock photos. The display also loads an emoji font from Google Fonts (fonts.googleapis.com); if your device already has the Noto Color Emoji font, nothing is downloaded. Those services have their own privacy policies.

This website

  • No cookies and no analytics. This site's code sets no cookies and uses no tracking or advertising scripts. Cloudflare may set a strictly necessary security cookie to block bots.
  • Hosting. The site is served by Cloudflare. To deliver pages and protect against abuse, Cloudflare processes technical data such as your IP address, browser type and the page requested. We do not use it to identify you.
  • Preferences. If you pick a language or a light or dark theme, that choice is saved in your browser's local storage. It never leaves your device.
  • Live demo. The demo runs in your browser with sample data. It loads sample photos from picsum.photos and an emoji font from Google Fonts.
  • Waitlist. If you join the Marco Cloud waitlist we store your email address and preferred language in a database on Cloudflare, only to tell you when Marco Cloud opens. We send one email when it opens. The address is not written to logs. If the form cannot save it, it offers to send us an email instead, and then your message stays in our mailbox only until we add you to the list. You can ask us to remove it at any time.

Marco Cloud

Marco Cloud is not open yet. This section describes how it is planned to work. We will review it, and update the date above, before the service opens. When it opens, Marco Cloud (app.marcohome.app) will process the following data to provide the service:

  • Account data: your email address and, if you sign in with Google, your name and profile picture.
  • Settings: your screens, layouts, location for the weather, calendar addresses, filters, birthdays, countdowns and similar settings you enter.
  • Calendar data: events read from the calendars you connect, so they can be shown on your screens.
  • Photos you upload for the photo background.
  • Technical data: the screens connected to your account (name, browser, screen size, last seen) and a security log of sign-ins and changes.

We will use this data only to run Marco Cloud for you: to show your calendar, weather and photos on your screens, keep your account secure, and answer support requests. We will not sell personal data, show ads or use your data to build profiles.

Where it will be stored. The plan is to store Marco Cloud data in the European Union on Cloudflare infrastructure, with access tokens encrypted at rest and all traffic over HTTPS.

Service providers. Cloudflare (hosting and storage) will process data on our behalf under a data processing agreement. The email provider for account emails has not been chosen yet; it will be named here before launch. Google will receive requests only when you connect a Google account.

Google user data

If you connect a Google account to Marco Cloud, Marco requests these permissions:

  • https://www.googleapis.com/auth/calendar.readonly: to read the list of your calendars and the events in the calendars you choose.
  • openid, email and profile: to identify your account and show which Google account is linked.

How we use it:

  • Calendar data is used only to display your events on your own Marco screens. Marco never creates, changes or deletes anything in your Google Calendar.
  • We do not sell Google user data, use it for advertising, use it to train AI or machine learning models, or transfer it to anyone except as needed to provide the display features you asked for, to comply with the law, or with your consent.
  • No person at Marco reads your Google data unless you ask us to for support, it is needed for security, or the law requires it.
  • Refresh tokens are stored encrypted. Event data is cached only to show it and is replaced on each refresh.

Marco's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time in Marco's calendar settings, which deletes the stored tokens and cached events right away, or remove Marco's access from your Google Account permissions page.

In self-hosted installs, the Google connection uses an OAuth client that you create, and tokens are stored only on your own server.

Legal basis

  • Marco Cloud account and service: performance of the contract with you (GDPR art. 6(1)(b)).
  • Waitlist: your consent when you submit the form (art. 6(1)(a)). You can withdraw it at any time by asking us to remove your address.
  • Security logs and the request data Cloudflare processes to deliver this site: our legitimate interest in keeping the site and the service available and secure (art. 6(1)(f)).
  • Answering your emails: our legitimate interest in replying to you, or steps you ask for before a contract.

International transfers

Cloudflare and Google are based in the United States and may process data outside the European Economic Area. Where they do, the transfer relies on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

Retention and deletion

For Marco Cloud these are the planned periods, to be confirmed before it opens:

  • Cached calendar events are kept for at most 30 days and are refreshed regularly. Disconnecting a calendar deletes its cached events.
  • Account data, settings and photos are kept while your account exists.
  • Deleting your account (in the settings, or by emailing us) deletes your data within 30 days. Encrypted backups are overwritten within a further 30 days.
  • Security logs are kept for 90 days.
  • Waitlist emails are deleted after the launch email, or earlier on request.

Your rights

You can ask to access, correct, export or delete your personal data, and you can object to or restrict its use. Write to hello@marcohome.app and we will answer within 30 days. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your data protection authority.

Marco Cloud accounts are meant for adults. Family members, including children, may appear in calendar events or photos that the account holder adds; the account holder decides what to add and can delete it at any time.

Changes

If this policy changes, we will update the date above. For important changes to Marco Cloud we will also tell account holders by email before they take effect.

Contact

Marco project, hello@marcohome.app. Source code: github.com/mr-reb00t/marco.