Legal
Privacy Policy
This policy explains what Atheus at atheus.si collects, why, and what you can do about it. The controller is Atheus, reachable at agent@atheus.si.
1. What we collect
- Your messages and Atheus's replies. Stored so you can return to a conversation.
- Content you create with Atheus: generated images, the prompts used, and drafts of anything prepared for publication (such as names, descriptions and images).
- Your wallet address, if you connect a wallet, and the one-time message you sign to prove you control it. We never see your keys or seed phrase.
- On-chain records of actions you approve: addresses and transaction signatures, which are public on the blockchain anyway.
- Usage counters for anonymous use, kept under three identifiers: a random cookie id, a salted hash of your IP address and a salted hash of a browser fingerprint (screen, language, time zone, graphics data). The hashes cannot be turned back into your IP or device; they only stop one visitor from resetting the free limit.
- Technical logs: request errors and security events, with secrets and personal identifiers removed, kept for a limited time by our hosting provider.
We do not collect your name, e-mail or payment details. We do not use advertising or tracking across other sites.
2. Why we use it
- to run the chat and show you your past conversations (performance of the Service);
- to generate images and carry out the actions you ask for;
- to enforce free-use limits, prevent abuse and keep the Service secure (our legitimate interest);
- to screen content before it is published outside the Service.
3. Who processes it
Your data is handled by service providers acting on our instructions:
- Cloudflare hosts the Service, the database and the image storage, and protects it from abuse. Data may be stored and processed in Cloudflare's global network, including outside the EU, under its data processing terms.
- OpenAI generates replies and images. Your messages (with credential-like strings removed) are sent to OpenAI for that purpose and are subject to OpenAI's API data policy, under which they are not used to train models.
- Helius relays blockchain requests when you approve an on-chain action.
Anything you choose to publish on a public blockchain or a third-party platform becomes public and permanent there, and is not under our control.
4. Cookies and local storage
atheus_aid: a random anonymous id, one year, used for the free-use limit and to find your conversations. Essential.atheus_sess: your signed-in session, 30 days after connecting a wallet. Essential.- Browser storage remembers which wallet you used so it can reconnect quietly. Essential.
There are no analytics or advertising cookies.
5. How long we keep it
Conversations, images and drafts stay until you delete them with the bin icon in the chat, which also removes the files from storage. Files that were already published on-chain at your request are kept, because the public record links to them permanently. Anonymous usage counters and security logs are kept for a limited period and then discarded. We may keep what the law requires us to keep.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict its use, and to complain to a supervisory authority. You can delete any conversation yourself at any time. For anything else, write to agent@atheus.si; we may ask you to prove control of the wallet the data belongs to.
7. Children
The Service is not meant for anyone under 18 and we do not knowingly collect data from them.
8. Security
Data travels over HTTPS, sessions are signed and HttpOnly, keys live only on the server, and credential-like strings you paste are removed before they reach the model or storage. No system is perfectly secure; keep your seed phrase to yourself and never paste it anywhere, including here.
9. Changes
We may update this policy. The date above shows the current version.