Privacy

Who is responsible

The data controller is LEGAL ENTITY NAME of REGISTERED ADDRESS. Questions, requests and complaints: hello@icarusuniverse.com.

What the software on your computer sends us

Nothing about your work. Icarus does not upload your files, your documents, your models, your rooms or your conversations with it. There is no telemetry and no analytics in the application.

It contacts us for three things, and you can see all of them:

• Downloads and updates — fetching the installer, and checking whether a newer version exists.
• Finding your own machines — the first time, it asks our always-on node where your other machines are. After that they talk to each other directly.
• Your token balance, if you have an account.

What this website stores

If you create an account, the record holds:

• your email address;
• a hash of your password — not the password, and not anything we could turn back into it;
• whether the address has been verified, and the token that verifies it;
• when the account was made and when it last signed in;
• failed sign-in attempts and whether the account is locked, which is what stops someone guessing their way in;
• your two-factor secret, if you turned two-factor on;
• your role, and your token balance and wallet address.

Our server also logs the network address a request came from, for a short time, in order to rate-limit abuse. It is not used to build a picture of you and it is not shared.

There is no advertising, no tracking pixel, no third-party analytics and no cookie for any of that. Signing in sets one token so the site knows it is still you; signing out ends it.

Paying

Payments go through Stripe, who take the card details directly. We never receive or store them. Stripe is told your email address so it can send a receipt and recognise you next time, and it holds the payment record under its own privacy policy. We keep the fact that a purchase happened and what it was for, which we have to for tax and accounting.

The shared network

This is the one place your work leaves your machine, and only if you choose it.

When you send a job to the shared network, it goes to another person's computer to be processed. That machine can see what you sent. It is not encrypted in a way that hides it from the person running it — it cannot be, because their processor has to read it to do the work. Running the job on your own hardware is the default, it is free, and nothing leaves.

If you offer your machine to the network, other people's jobs arrive on it. You must not read, keep or interfere with them.

Why we are allowed to hold it

Your account details, because we need them to give you the service you asked for. Rate-limit records and sign-in counters, because we have a legitimate interest in the site not being knocked over or broken into. Purchase records, because the law requires us to keep them.

How long

Account details last as long as the account. Delete it and the record goes, apart from purchase records we are legally required to keep (normally RETENTION PERIOD — commonly 6 years for tax). Rate-limit records last hours, not months.

Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, or to object to our holding it. Because the list above is short, these requests are usually easy to answer. Email hello@icarusuniverse.com and we will reply within one month.

If you are in the UK or the EU and you think we have handled your data badly, you can complain to your data protection authority — in the UK, the Information Commissioner's Office.

Where it is kept

Our node runs in REGION — e.g. AWS London (eu-west-2). Stripe processes payments under its own terms and may handle data outside your country.

Children

Icarus is not intended for children under AGE, and accounts are not knowingly created for them.

Changes

If this policy changes in a way that matters, we will say so on this site and change the date at the top.