The whole product is proof, so this page is precise about what we hold. Short version: public posts, public scorecard facts, an immutable forge record — and never a wallet.
Your stable X user ID, handle, display name, avatar URL, and public follower/following/post counts — captured when you sign in with X OAuth. We request read access only: never posting rights, never DMs.
Public X posts from April 24, 2023 (the Mad Lads mint) onward that match "madlads" or "mad lads" from your account. Deleted posts, protected accounts, and other people's posts are never part of your record.
No wallet addresses, no signatures, no transactions, no custody. Ever. MadCards proves culture through public X posts, not on-chain access.
An X session cookie, a transient X OAuth state cookie, and an admin cookie for operators. All signed and httpOnly. No advertising trackers, no third-party analytics cookies.
X API (identity + public post search), Vercel (hosting and asset storage), Upstash (rate limiting and scan delivery), and error monitoring for reliability. Proof records stay in our database.
Proof records are kept while your card exists so the archive stays verifiable. Hidden cards are removed from all public surfaces.
You can request your card be hidden, corrected, or removed. Reach the team through the Mad Lads community server and an operator will handle it — every moderation action is logged.
How scores are computed lives in the methodology. Usage terms live in the terms.
