Privacy policy

Last updated 27 October 2026.

What this service is

madcat is a sign-in service for the madcat desktop application. It lets you authenticate with an account you already have at Google, GitHub or Facebook. It does not run adverts, analytics or tracking of any kind.

What we collect

When you sign in with a provider, we receive and store only what is needed to recognise you next time:

We do not receive or store your password, your contacts, your posts, or any other data from the provider. We request the minimum scopes needed to read your basic profile.

Sessions and cookies

We set one cookie to keep you signed in on this site. It holds an opaque, signed session identifier and nothing else. Web sessions expire after 7 days; desktop sessions expire after 90 days. A short-lived cookie is also set during the sign-in handshake and removed as soon as it completes. There are no third-party cookies.

How we use your data

Solely to authenticate you and to show you which providers are linked to your account. We do not sell, rent or share your data with anyone, and we do not use it for marketing.

Where it is stored

Data is held in a database on a server we operate. It is transmitted only over HTTPS. Access is limited to the people who run the service.

Your rights

You can see what we hold about you on your account page after signing in. You can sign out at any time, which ends the current session. You can ask us to delete everything we hold about you; see the data deletion instructions. You may also revoke our access from your Google, GitHub or Facebook account settings at any time.

Changes

If this policy changes, the date at the top of this page will be updated.

Contact

Questions about this policy: privacy@madcat-os.com.