Talos Engine Privacy Notice

Beta draft, 25 October 2026. Version beta-2026-10-25, effective 25 October 2026

This notice explains how Cadarn Inc. (“Cadarn”, “we”, “us”) collects and uses personal information in connection with the Talos Engine website, beta sign-up, Talos Launcher and Talos Engine (together, the “Services”).

What we collect

Information you give us

Sign-up details: your name, email address and any optional answers on the beta form (for example your role, studio, or what you want to build).
Feedback and support: bug reports, comments, screenshots, logs and files you choose to send us.
Communications: emails and messages you send us.

Information collected automatically

Download and account activity: when you download or sign in, we log your email, the build you downloaded, the time, and the country your connection comes from, to control access to the beta and prevent abuse. Our hosting provider works out that country from your IP address. We use the address only for a moment, to limit repeated attempts, and we don’t store it.
Diagnostics: crash reports and error logs, which include the Software version, operating system, hardware details (such as GPU model) and the technical state at the time of the crash.
Usage analytics (only if enabled): if the Software includes usage analytics, we’ll describe them in the in-app settings, and you’ll be able to turn them off. Usage analytics are opt-in: the engine and launcher send nothing until you choose to share usage data, and you can turn it off at any time in settings.
Website: standard server logs (IP address, browser, pages visited) and essential cookies needed for the site to work. The website uses no analytics or marketing cookies. If we add any, we will update this notice first.

What we don’t collect: we don’t collect the content of your projects unless you send it to us in Feedback, or use a feature that sends it to a service you choose (see “AI and third-party services”).

How we use it

to run the beta: inviting you, giving you access, sending builds and updates;
to fix bugs, improve performance and develop the Services;
to contact you about the beta, including surveys and important notices. You can opt out of non-essential emails at any time;
to keep the Services secure and prevent misuse;
to comply with legal obligations.

We do not sell your personal information, and we don’t share it for cross-context behavioral advertising.

Service providers that help us run the Services, under contracts that limit their use of your data: for example hosting and content delivery (Cloudflare) and email (Google Workspace).
AI and third-party services you choose to use: if you use a feature that connects to a third-party AI model or other service, the content you send goes to that provider and is handled under its privacy policy.
Legal and safety: when required by law, or to protect rights, safety or security.
Business transfers: if Cadarn or the Services are involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction.

Retention

We keep sign-up and account information while you have an account. Diagnostics and logs are kept for up to 12 months unless we need them longer to fix a specific issue. Security logs about your account are kept for up to 400 days. Bug reports are kept while we work on them, and deleted with their screenshots and logs 12 months after we close them. Usage statistics are kept per person for up to 2 years, then only as anonymous weekly totals. Access requests are deleted 12 months after their last change. A waitlist sign-up we never invited is deleted 12 months after you signed up; one we declined, 90 days after we declined it if that is sooner. If we invited you from the waitlist, your sign-up is kept while you have an account or an open invite, and deleted 30 days after your last invite expired. You can delete your account and your information at any time (see “Deleting your account”).

Deleting your account

You can delete your account yourself on your account page (Account, then Delete account), or ask us to. Your account stops working at once, and you’re signed out everywhere: in every browser and in the launcher. (An engine that is already running keeps its licence offline until it next checks, at most 14 days.) If you want a copy of your data first, Account, then Download my data gives you one file (JSON) with your account, teams, sign-ins, downloads, usage statistics, bug reports, roadmap activity and the security log entries about you.

After 30 days, we delete:

Your sign-in methods (the GitHub or Google accounts you linked), every signed-in browser and launcher, and any older access tokens.
Your team memberships and your personal workspace. Teams you were a member of keep working without you.
Invitations sent to your email address, and your place on the waitlist or access-request list.
Launcher sign-in requests, sign-in codes and download links made for you.
Your installs, downloads, usage statistics, milestones and weekly check-ins.
Bug reports you sent, with their screenshots and logs.
Your roadmap votes and display name.
Your name and email address.

What we keep, without your name or email address. They carry a random id that replaced your account id when your data was deleted; the dates in them (when your account was made, when you accepted the terms, when you asked for deletion) stay as they were.

Security log entries about your account, with your email address replaced by a fingerprint of it made with a secret key (HMAC-SHA256), which cannot be turned back into the address. We keep security logs for up to 400 days to investigate misuse.
The record that you accepted the Beta Tester Terms (which version, when, and whether in the browser or the launcher). We may need to show which terms applied.
For 12 months, a record that your account was deleted and when, under the same fingerprint. So we can show the deletion was done, and answer if you ask again.
Invitations you sent to other people, and roadmap posts you wrote (shown as “a tester”). They belong to the team or the roadmap; they do not show your name or email address.
For 100 days, your old account id on the list of people whose usage statistics we leave out. Statistics the Software already sent are held raw for up to 90 days and cannot be picked out one by one.
Changed your mind? Sign in again within those 30 days and your account and data come back; you then sign in again on your other devices and in the launcher. After that, nothing can be recovered.
Usage statistics already sent: our analytics provider holds the raw points the Software sent for up to 90 days. From the day your data is deleted, we leave yours out of everything we compute, and they then expire.
Teams: if you’re the only owner of a team, hand it over to someone else or close it first. Teams you’re only a member of keep working without you.

Deleting your account is not the same as cancelling a subscription. Cancelling a subscription stops billing only: your account and your data stay. (The beta is free, so there is no subscription to cancel yet.)

Your choices and rights

Email: use the unsubscribe link, or contact us.
Access, correction, deletion: download a copy of your data or delete your account yourself on your account page (see “Deleting your account”), or contact us and we’ll respond within 30 days. Depending on where you live (for example California, or the EU/UK), you may have additional rights, such as data portability or objecting to certain processing. We won’t discriminate against you for using them.
Leaving the beta: uninstall the Software and delete your account (Account, then Delete account).

International users

We’re based in the United States, and the Services are operated from the U.S. If you use them from elsewhere, your information will be processed in the U.S.

Security

We use reasonable technical and organizational measures to protect your information. No system is perfectly secure, so please don’t send us sensitive personal information we haven’t asked for.

Children

The Services are not intended for anyone under 18, and we don’t knowingly collect personal information from children. If you think a child has given us information, contact us and we’ll delete it.

Changes

We may update this notice. If a change is material, we’ll let you know by email or in the Launcher before it takes effect.

Contact

Cadarn Inc. · privacy@cadarn.ai · Cadarn Inc., 8 The Green, Suite B, Dover, DE 19901