Privacy Policy

Last updated: June 2026

MadcatOS is operated by Saiden Tactical Systems ("we", "us"). This policy describes how we collect, use, and protect your information.

What we collect

When you sign in via GitHub, Google, Hugging Face, or CivitAI, we receive your public profile information (name, email, avatar) and any scopes you explicitly grant. We store OAuth tokens encrypted at rest to maintain your session and enable API delegation on your behalf.

How we use it

Your data is used solely to authenticate you, display your identity in the UI, and — where you grant permission — make API calls to connected providers on your behalf. We do not sell, share, or monetize your personal data.

Third-party services

MadcatOS is hosted on Cloudflare Pages. OAuth authentication involves redirects to GitHub, Google, Hugging Face, and CivitAI. Each provider has its own privacy policy governing data they process during authentication.

Data retention

Session data is stored in signed cookies (30-day expiry). Connected account tokens are retained until you disconnect the account or delete your MadcatOS account. You can revoke access from any connected provider at any time through their respective settings.

Your rights

You can disconnect any linked account, sign out to clear your session, or contact us to request full data deletion. We will respond to deletion requests within 30 days.

Contact

For privacy inquiries, please reach out to the MadcatOS team.