Privacy Policy

Last updated: September 23, 2026

1. Overview and Scope

This Privacy Policy explains how pkggen (“we”, “us”, or “our”), a project maintained by MadLadSquad and Heapforge , collects, uses, and protects technical and personal information when you visit and use our website at https://pkggen.madladsquad.com/ .

We are committed to respecting your privacy and protecting personal data in compliance with the General Data Protection Regulation (Regulation (EU) 2016/679 - “GDPR”), the UK General Data Protection Regulation, and the EU ePrivacy Directive (Directive 2002/58/EC).

Our website is built on the principles of privacy by design and data minimization: we do not collect personal information, tracking profiles, or analytics identifiers, and we only process the technical data necessary to deliver static website content securely and reliably.

This website is a static site. It contains no JavaScript, loads no third-party resources, and makes no requests to any domain other than its own.

2. Data Controller

The Data Controller responsible for the processing of data on this website pursuant to Article 4(7) of the GDPR is:

Project: pkggen / MadLadSquad
Websites: https://pkggen.madladsquad.com / https://madladsquad.com
Email: contact@madladsquad.com

If you have any questions or wish to exercise your rights under data protection laws, please contact us at contact@madladsquad.com .

3. Data Processing and Hosting

Website Hosting via Cloudflare Pages

This website is statically generated and hosted using Cloudflare Pages, a service provided by:

Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107, USA

Cloudflare acts as both our hosting provider and our content delivery network. Pages are served from the Cloudflare edge location nearest to you.

When you access our website, Cloudflare’s servers automatically process and temporarily store technical data in server log files. This standard technical transmission data includes:

Your IP address
Date and time of the request
Requested URL and HTTP method (e.g., GET)
HTTP status code and volume of data transferred
Referrer URL (the previous page from which you arrived)
User-Agent string (browser type, version, and operating system)
The Cloudflare edge data centre that served the request, and TLS/protocol metadata

Purpose and Legal Basis

Purpose: Server and edge logs are processed to deliver the requested website content to your browser, ensure system stability, detect and prevent malicious activities (such as Distributed Denial of Service (DDoS) attacks), and maintain infrastructure security.
Legal Basis: Article 6(1)(f) GDPR (our legitimate interest in operating a secure, functional, and reliable website).

We have no access to, and do not retain, raw request logs for this website.

For further information on how Cloudflare processes data, please refer to the Cloudflare Privacy Policy and the Cloudflare subprocessors list .

4. Assets and External Content

This website loads no third-party resources whatsoever. Every asset required to render a page — stylesheets, web fonts, images, and icons — is served from pkggen.madladsquad.com itself. Your browser makes no connection to any other domain when viewing this site.

Specifically, the following are self-hosted on our own domain:

The Ubuntu typeface (ubuntu-*.woff2), used for all text. It is not loaded from Google Fonts; no request is made to fonts.googleapis.com or fonts.gstatic.com.
The Twemoji colour emoji font (TwemojiMozilla.woff2), used so emoji render identically across operating systems.
Syntax highlighting for code samples, which is applied when the site is built rather than by a script in your browser. No highlighting library is downloaded from a CDN.
All images and icons (the pkggen logo, favicon, and social preview image).

Outbound Links

Our pages link to external sites — for example our GitHub repository , our Discord community , madladsquad.com , and heapforge.com . These are ordinary hyperlinks, not embedded content: nothing is loaded from those domains unless you choose to click through, at which point that site’s own privacy policy applies.

5. Cookies, Local Storage, and Tracking

No Cookies Are Set by Us

This website does not use cookies. We do not place:

Tracking cookies
Advertising or marketing cookies
Analytics cookies
Session or authentication cookies

Cloudflare Security Cookies

Depending on the security features enabled on our Cloudflare zone, Cloudflare may set a strictly necessary cookie such as __cf_bm (bot management) or cf_clearance (challenge clearance). These cookies exist solely to distinguish automated traffic from human visitors and to protect the site from abuse. They contain no personal profile, are not used for analytics or advertising, and are exempt from the consent requirement under Article 5(3) of the ePrivacy Directive as strictly necessary for the provision of the service you requested. See the Cloudflare cookie documentation for details.

No Local Storage Tracking

The site ships no JavaScript at all, and therefore cannot and does not use browser storage technologies (localStorage, sessionStorage, or IndexedDB) to track users, store behavioral profiles, or persist unique identifiers across visits.

No Web Analytics

We do not use third-party tracking or web analytics services (such as Google Analytics, Matomo, or Facebook Pixel), and we do not use Cloudflare Web Analytics.

Under the EU ePrivacy Directive (Directive 2002/58/EC) and relevant national implementations, a cookie consent banner is required only when a website uses non-essential cookies or stores/accesses information on the user’s terminal equipment.

Because this website sets no cookies of its own and uses no local tracking mechanisms — and because the only cookies that may be set are Cloudflare’s strictly necessary security cookies — no cookie consent banner is legally required.

6. Communications and Community Channels

If you contact us voluntarily:

By Email (contact@madladsquad.com ): We process your email address, name (if provided), and the content of your inquiry solely to answer your questions and provide technical support.
Via GitHub or Discord: Interactions within our GitHub repository or our Discord community are governed by GitHub’s and Discord’s respective privacy policies and terms of service.

Legal Basis and Retention

Legal Basis: Article 6(1)(b) GDPR (performance of a contract or pre-contractual steps) and Article 6(1)(f) GDPR (our legitimate interest in responding to user inquiries and maintaining our open-source community).
Retention: Inquiries and correspondence are retained only for as long as necessary to address your request or resolve the underlying technical matter, after which they are deleted unless legal retention obligations apply.

7. International Data Transfers

Our hosting provider, Cloudflare, Inc., is headquartered in the United States. Technical connection data (including IP addresses) may therefore be transmitted to and processed on servers outside the European Economic Area (EEA).

To ensure an adequate level of data protection in accordance with GDPR requirements (Chapter V GDPR), Cloudflare relies on:

The EU-U.S. Data Privacy Framework (DPF) adequacy decision issued by the European Commission, under which Cloudflare is certified.
Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Article 46(2)(c) GDPR.

Note that Cloudflare’s edge network means requests from within the EEA are normally served by a data centre inside the EEA.

8. Your Rights as a Data Subject

Under the GDPR (Articles 15 through 22 and Article 77), you have the following statutory rights regarding your personal data:

Right of Access (Art. 15 GDPR): You have the right to request confirmation as to whether we process personal data concerning you and to receive information about that processing.
Right to Rectification (Art. 16 GDPR): You have the right to obtain the correction of inaccurate personal data or completion of incomplete data.
Right to Erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data (“right to be forgotten”) when statutory conditions are met.
Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of processing under specific legal conditions.
Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data based on Article 6(1)(f) GDPR (legitimate interests).
Right to Lodge a Complaint (Art. 77 GDPR): If you believe that our processing of your personal data violates data protection legislation, you have the right to lodge a complaint with a competent data protection supervisory authority in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.

To exercise any of these rights, please send an email to contact@madladsquad.com .

9. Data Security

We implement technical and organizational security measures to protect data transmitted to our site against accidental or intentional manipulation, loss, destruction, or unauthorized access. All connections to this website are encrypted via HTTPS (TLS/SSL), and the site is served with a restrictive Content Security Policy that forbids loading any third-party resource.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to maintain compliance with evolving legal requirements or to reflect changes in our website architecture. Any revisions will be published on this page with an updated revision date.