OSCAR Privacy Policy

Effective 20 September 2026

OSCAR is software for building control surfaces for interactive installations. This policy says what information OSCAR and its optional account handle, why, and what you can do about it.

OSCAR is published by the OSCAR project ("we", "us"), at https://www.createwithoscar.site. Contact: hello@createwithoscar.com.

The short version

• OSCAR runs on your own computer. Your projects, your layouts and everything your widgets send stay on your computer and your network. We never see them.
• You can use OSCAR without an account. Then we collect nothing about you at all.
• If you sign in, we keep your email address and a record of which plan you have. That is how OSCAR knows what to switch on.
• If you make a surface public, a copy of that page is stored on our relay so visitors can open it. What visitors do on it passes through and is not kept.
• We do not sell information, show advertising, or track you across sites. OSCAR has no analytics.

OSCAR without an account

OSCAR stores your projects and settings in files on your computer. It sends OSC, DMX and MIDI to the addresses and devices you choose, on your own network. None of this reaches us.

Two things do leave your computer, and neither goes to us:

• Checking for updates. OSCAR asks GitHub whether a newer version exists. GitHub sees your IP address, as any website does. You can switch this off by setting OSCAR_NO_UPDATE_CHECK=1.
• Templates that load files from the web. A few templates load a font or a library from the jsDelivr content network when they are displayed. jsDelivr sees the IP address of the device showing the page.

If you sign in

Signing in is optional. It unlocks the Free Tier and Pro features. You sign in with Google, with Discord, or with a code sent to your email.

We receive and store:

• your email address;
• the name and profile picture your Google or Discord account shares with us, if any;
• an identifier for your account, and the times you signed in;
• which plan you have, when it expires, and how you got it (for example a free trial, or a purchase reference).

We use this only to recognise your account and to give OSCAR a signed file saying what your plan includes. That file, which contains your account identifier and email address, is stored on your computer together with a sign-in token, so OSCAR keeps working offline. Signing out in OSCAR removes both from that computer.

Information from Google

When you choose "Continue with Google" we ask Google for the basic profile only: your email address, your name and your profile picture (the openid, email and profile scopes). We do not ask for, and cannot see, your Gmail, Drive, Calendar, contacts or any other Google data.

We use this information only to create and recognise your OSCAR account. We do not sell it, do not use it for advertising, do not share it with anyone except the service providers listed below who store it for us, and do not use it to train artificial intelligence models.

The same applies to information from Discord.

If you make a surface public

Pro lets you make a published surface reachable from the internet through our relay, so a visitor can use it from a phone without joining your network.

• The page. A copy of the page you made public is stored on the relay until you make it private again or replace it. Anyone with the link can open it, so do not put anything confidential on a public surface.
• What visitors do. When a visitor moves a control, the relay passes on which control and what state, to your OSCAR and to the other visitors. It is not stored. The relay keeps a count of messages per surface per day, to enforce limits, and nothing about their content.
• Visitors. Visitors do not need an account and are not asked for any information. The relay sets no cookies and does no tracking. Cloudflare, which runs the relay, processes visitors' IP addresses to deliver the page and to block abuse.
• Your account. The relay sees the account identifier in your plan file, to check that the plan includes public surfaces and that a surface stays with the account that created it.

Who stores this for us

We use these companies to run the service. They process the information above on our behalf:

• Supabase (accounts and plans; data held in the United States);
• Cloudflare (the relay and public pages; worldwide network);
• Google and Discord, only if you choose to sign in with them;
• GitHub (downloads and the update check).

If you are outside the United States, this means your account information is transferred to and stored in the United States.

How long we keep it

We keep account information for as long as you have an account. If you ask us to delete your account we delete your email address, profile and plan records within 30 days, except where the law requires us to keep a record of a purchase. A public page is deleted from the relay when you make it private.

Your choices and rights

You can use OSCAR without signing in. You can sign out at any time. You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete your account, by writing to hello@createwithoscar.com. We will answer within 30 days.

Depending on where you live you may have further rights under laws such as the GDPR, the UK GDPR, PIPEDA or the CCPA, including the right to complain to your data protection authority. Where the GDPR applies, we rely on performing our contract with you (running your account) and on our legitimate interest in keeping the service secure.

You can also remove OSCAR's access from your Google account at any time at https://myaccount.google.com/permissions.

Children

OSCAR accounts are not intended for children under 13 (or the age required in your country to consent to online services). We do not knowingly collect information from them.

Security

Sign-in is handled by Supabase and by Google or Discord; OSCAR never sees a password. Connections to our services are encrypted. No system is perfectly secure, and we will tell you and the relevant authorities if a breach affects your information, as the law requires.

Changes

If we change this policy we will post the new version at this address and change the date at the top. If the change is significant we will tell account holders by email.

Contact

The OSCAR project
hello@createwithoscar.com
https://www.createwithoscar.site