Last updated July 15, 2026
This page describes the data behavior implemented by the current website and desktop sign-in flow.
Keyboard presses, mouse movement, mouse clicks, and gamepad input used by the homepage demo are processed in your browser to choose visual Sprite layers. The current demo does not send those input events to Overlay Cat servers or store an input history.
If you choose Google sign-in from the desktop app, Google returns an account identifier, email address, and optional name and profile image. The website uses that information to create a signed desktop session and returns it to the local desktop callback. The current implementation does not persist that profile in an Overlay Cat database.
Cloudflare may process ordinary request information needed to deliver and protect the site, such as IP address, user agent, requested URL, timestamps, and security events. Google processes data under its own terms when you use Google sign-in.
Public pages load a Plausible-compatible analytics script from aisai.top for aggregate traffic metrics such as page URL, referral source, browser, operating system, device type, and approximate region. The site also records aggregate conversion events such as opening a setup guide, visiting the download page, selecting an installer platform and format, first engaging with the interactive preview, or choosing a character and input style. These events do not contain typed text, specific keys or gamepad buttons, mouse coordinates, account identifiers, or other personal data. The site does not intentionally set analytics or advertising cookies and does not use these measurements to build advertising profiles. See the Plausible data policy for the standard analytics data model.
Questions about this notice can be sent to privacy@overlaycat.com.