Privacy Policy

Effective date: 7 October 2026

Kawaii Cat Attack!! puts cartoon cats on your screen. This policy explains what Kawaii Cat Attack!! knows about you and what happens to it. The short version: what you use stays on your device. We don't have accounts, ads or analytics, and we don't sell or share your data. If you join the alpha test, we also get your sign-up details and the feedback you choose to send (see "Alpha testing" below).

"We" means HeatSeeker LLC, a Utah limited liability company. You can reach us at support@kawaiicatattack.com.

1. What Kawaii Cat Attack!! uses, by platform

Android app

• Apps you choose to guard and the limits you set, stored on your phone.
• App usage times from Android's Usage access: which app is open and for how long, used only to show cat reactions and apply your limits. Stored on your phone.
• Your cats, outfits and settings, stored on your phone.
• Permissions: Display over other apps (to draw the cats), Usage access (above), Notifications (to show that cats are on and let you turn them off), Vibration (a short buzz when a cat scratches). Kawaii Cat Attack!! can't see or read what's on your screen.
• Nothing above leaves your phone. It isn't included in cloud backups.

Browser extension (Chrome, Edge)

• The sites you set a daily time limit for, and the minutes you spend on those sites each day, kept for 7 days, then deleted. Sites without a limit aren't counted.
• Your limits, chosen cat and settings, and the sites where you turned cats off ("No cats on this site"), until you turn them back on.
• While a cat is on a page, the extension uses the page's address (to know which site's limit applies), the window size and your pointer position (so the cat can look at it). The pointer position is used live and never stored.
• The extension never reads what's on the pages you visit: no text, forms, passwords or cookies.
• When you click into a password or card field, the cat steps aside. The extension only checks the kind of field, never what you type.
• Cats also skip pages that look like sign-in or payment pages. To tell, the extension looks only at the page's address and whether the page shows a password, card or payment field, never at what's in it.
• Your cat size setting is saved with Chrome sync if you have sync turned on, so it follows you to your other computers. It's just one number; your limits, minutes and sites are never synced.
• When you install or update the extension, it adds the cat to tabs you already have open, so you don't have to reload them. It runs only its own built-in cat script and reads nothing from those pages.
• All of this stays in your browser on your computer. Nothing is sent to us, except feedback you choose to send from an alpha build (see "Alpha testing").

Desktop app (Windows, Mac)

• The name of the app in front and how long it's been in front, only for the apps you choose to guard, to apply your limits. Stored on your computer.
• Your limits, cats, outfits and settings, stored on your computer.
• The app never reads your windows, screen contents or typing.
• Update check: the app asks our server whether a newer version exists. That request includes the app version and your operating system, and, like any internet request, your IP address. We don't link it to anything else.

Website (https://kawaiicatattack.com)

• Our hosting provider (Cloudflare) keeps standard server logs (IP address, browser type, pages requested) for security and to keep the site running. We don't use analytics, ad trackers or advertising cookies.
• The try-it cats on the site keep their state in your browser only.
• If you move the furniture buttons around (or pick light or dark mode), the site remembers that in your browser's local storage so it looks the same next time. It never leaves your browser. "Tidy furniture" or clearing your browser data removes it. We don't set cookies; Cloudflare may set a short-lived security cookie to protect the site from attacks.
• If you email us at support@kawaiicatattack.com, we get your email address and message and use them only to answer you. Cloudflare forwards the email to us.

Alpha testing (only if you're an alpha tester)

Signing up (kawaiicatattack.com/alpha):

• We keep: your name or nickname, email address, the devices you could test on, how you heard about us, the Google account email for the Chrome Web Store test (only if you give it), your "launch news" choice, and when you agreed to the Alpha Tester Terms (date and terms version).
• The form uses Cloudflare Turnstile to stop spam bots. Turnstile checks signals from your browser and IP address at that moment; we don't keep them. We don't store your IP address with your sign-up.
• To let you install the test version, we add your Google account email to the tester list in the Chrome Web Store (and, for Android, to Google Play's tester list). Google then knows you're a tester for this item.
• Your sign-up is stored on our Cloudflare account and seen only by Chase. We use it only to run the alpha: invites, the weekly alpha note and test-related emails.

The feedback box (in alpha builds of the extension, website, desktop app and Android app):

• Nothing is sent until you press Send on a note. Then we get: your note and the type you picked (bug, suggestion or feedback); the app (for example the extension), its version, your operating system and browser or app type (like "Windows / Chrome"); which screen you were on (for example "popup"); the date and time; which test build sent it (one label per build, not per person); and on websites the site's name (like youtube.com), unless you untick it. The page address is sent only if you tick "Include this page's address", and never the part after "?" or "#". A screenshot is sent only if you add one yourself.
• We never get the page's content, your browsing history, form entries, cookies or anything from other tabs or apps. Feedback isn't linked to your name or email, unless you write them in your note (please don't).
• To stop spam, our server counts how many notes come from one connection using a scrambled code made from your IP address and the day; it never stores the IP address itself and deletes the codes after 48 hours.
• Notes are stored in a private Cloudflare D1 database (screenshots in private Cloudflare R2 storage). Chase reads every note first in an admin page only he can sign in to. Before a note he approves becomes a ticket, we remove personal details from it (like names, nicknames, email addresses, usernames or anything else that could identify you or someone else). It is then copied into the team's private project files as a ticket, where the team works on it. Notes he rejects or hasn't reviewed never reach the team.
• Our team uses AI. Kawaii Cat Attack!! is made by Chase working with AI tools (Claude, made by Anthropic). Those AI tools read the notes Chase approves, sort them, write them up as tickets and help work on them. That means the text of an approved note is processed by Anthropic's Claude service. Notes Chase rejects or hasn't reviewed are never given to the AI tools. The team's project files (with the tickets) are kept on Chase's computer and in a private GitHub repository.
• Who can see tickets. Besides Chase and his AI tools, tickets can be seen by developers and artists Chase has approved to work on Kawaii Cat Attack!! and given access to that private repository. They may use AI tools (like Claude) to help them work on tickets too. They see tickets with personal details removed. They never see your sign-up details, your invite, the feedback database or notes Chase hasn't approved.
• Sending an idea or bug report doesn't mean we'll build or fix it, or when.
• Until sending is switched on, notes stay in your browser (up to 50, removed after 30 days) and you can copy them yourself.

Your personal invite link (desktop alpha, if Chase sent you one):

• For each invite we keep: the label Chase gave it (usually your first name or nickname), when the link was used to download the installer, when the app first started with it and when it checks for updates, which version of the Alpha Tester Terms you agreed to and the app version, and scrambled (hashed) copies of the link's secret code and of a code made for your computer. That lets the app check your invite and get updates, and lets Chase switch an invite off.
• When the installer downloads, our server keeps a scrambled code made from your IP address for 72 hours, only to match the installer to your invite if it gets renamed. Then it's deleted. We never store the IP address itself.
• On your computer, the app keeps your "I agree" answer (terms version and time) and its computer code in its own settings folder (protected with Windows' or macOS's built-in encryption where available).
• Updates come only from kawaiicatattack.com, and only for computers with a working invite.

How long we keep alpha data:

• Sign-up details: deleted 30 days after Kawaii Cat Attack!! launches publicly, or when you ask. If you ticked "launch news", we keep only your email until we've sent that one launch email, then delete it.
• Feedback: rejected notes after 30 days, unreviewed notes after 90 days, approved notes until 90 days after the alpha ends (the ticket in our project files may keep the approved text, without your details).
• Invite records: deleted 30 days after the alpha ends, or sooner when you ask (that switches the invite off). IP codes: 72 hours.
• Emails you send to support@ or replies to Chase stay in his inbox until you ask us to delete them or the alpha has ended and they're no longer needed.

Deleting your alpha data: email support@kawaiicatattack.com. Since feedback isn't tied to your name, tell us roughly when you sent it and what it said, and we'll delete it from the database and our project files within 30 days. Since tickets don't contain your personal details, older copies of a ticket may remain in the project's history. Removing the extension deletes any unsent notes saved in your browser.

2. Purchases

• Android: purchases go through Google Play. We receive a confirmation (order ID, product, purchase token) to unlock your item. We never see your card details. Google's privacy policy applies to Google Play.
• Purchases don't carry over between platforms (there's no account).

3. What we don't do

No accounts. No ads or advertising IDs. No analytics or tracking (alpha feedback is only what you choose to send). No location, contacts, photos, camera or microphone. We don't sell or share your data, and we don't use it for anything except the features above.

4. Who else is involved

Google Play (Android purchases and the Android test), the Chrome Web Store (the extension test's tester list), Cloudflare (website hosting, app downloads, forwarding emails sent to support@kawaiicatattack.com, and for alpha testers: storing sign-ups and feedback, the spam check on forms, and securing Chase's admin page), Anthropic (for alpha testers: the Claude AI tools our team uses read feedback notes Chase has approved, to turn them into tickets and work on them), and GitHub (stores the team's private project files, including feedback tickets, which approved collaborators can see). We don't give them your usage data.

5. How long we keep things, and how to delete them

• Data on your device stays until you delete it: Android: Settings → Clear my data in Kawaii Cat Attack!!, or uninstall. Extension: remove a limit (its minutes are deleted), or remove the extension. Desktop: Clear my data in the app's settings, or uninstall.
• Browser extension minutes older than 7 days are deleted automatically.
• Alpha sign-ups and feedback: see "Alpha testing" above.
• Purchase records are kept by Google Play as required for payments and taxes.

6. Children

Kawaii Cat Attack!! is made for people aged 13 and up. We don't knowingly collect personal information from children under 13. If you think a child has given us personal information (for example, an email for a purchase), contact us and we'll delete it.

7. Your rights

Depending on where you live (for example, the EU, UK or some US states), you may have rights to access, correct or delete your personal data, or to object to how it's used. Since almost everything stays on your device, you control it directly (section 5). For anything we or our payment providers hold, email support@kawaiicatattack.com and we'll answer within 30 days. You can also complain to your local data protection authority.

8. Changes

If we change this policy, we'll update the date above and, for important changes, tell you in the app before they apply.

9. Contact

HeatSeeker LLC, a Utah limited liability company · support@kawaiicatattack.com