The MacDeck team takes the security of our software and user privacy seriously. If you discover a security vulnerability or privacy concern within MacDeck, please do NOT open a public issue on GitHub.

Instead, please send a detailed report via email to: 📧 zhenqiang.sun@gmail.com

• A clear description of the vulnerability.
• Steps to reproduce the issue (including sample code, terminal commands, or screen recordings).
• Potential impact and affected macOS versions.
• Any suggested mitigations or patches, if available.

• We will acknowledge receipt of your vulnerability report within 48 hours.
• We will provide a timeline for triage and resolution.
• Once resolved, we will publish an update along with proper attribution in the release notes (unless you prefer to remain anonymous).

• No Cloud Backend: MacDeck does not operate any centralized server or user database.
• Zero Telemetry: We do not collect analytics, track application usage, or harvest device telemetry.
• Minimal Permissions: Accessibility permissions are used strictly to query and set window frames on user demand. No keystrokes or screen contents are captured or stored.