Privacy

osucatalog keeps daily totals for visits, repeat visits, searches, searches with no results, filter use, preview starts, batch reviews, mix reviews, ZIPs prepared, ZIP responses sent, and download redirects. These counters contain no IP address, account, search text, map ID, or browser identifier. A repeat visit means this browser has visited on an earlier day; it is an estimate, not a count of people. A download redirect or sent ZIP does not confirm that a file was saved.

Without an account, your selected maps, owned IDs, saved searches, and preferences stay in your browser storage. If you sign in, owned IDs and saved searches also sync to our server. The server stores your sign-in name, a session token hash, and your synced lists. Email/password accounts store a salted password hash, never the password. Email ownership is not verified and password reset is not available yet. Sessions expire after 30 days. You can sign out or delete your account on the account page.

Connected OAuth providers handle their own sign-in under their policies. Cover art and previews come from osu! hosts. Single-map downloads open independent mirror sites. For ZIP batches, our server briefly receives selected archives from public mirrors and serves one ZIP; completed jobs expire after one hour.

For a map or rights concern, report a map.