1. Who we are

Athena (“we”, “us”) provides software, licensing, and related platform services. This Policy applies to our website, accounts, licenses, loaders, modules, APIs, and related services.

2. Information we collect

Depending on how you use Athena, we may collect:

• Account information you submit when you sign up or manage your profile
• IP address
• Hardware identifiers and related device/enforcement signals needed to operate licensing and abuse prevention
• License, purchase, and entitlement records
• Security and abuse-related logs, including identifiers associated with bans or blacklists
• Basic technical logs generated while you access the Services

3. Why we collect it

When you sign up, you agree that Athena may use your IP address and hardware identifiers for the duration of your use of the platform. We use this information to:

• Create and secure your account
• Deliver licenses and platform functionality
• Prevent fraud, multi-accounting abuse, and unauthorized access
• Investigate reverse engineering and other Terms violations
• Maintain permanent blacklist records when required for enforcement
• Meet legal obligations where applicable

4. Local storage and no third-party data platforms

We keep user information private and store it on infrastructure we control. We do not use third-party backend platforms such as Firebase to host or process your account data.

Operational service providers that are strictly necessary to run infrastructure (for example, hosting or network providers) may process technical traffic as part of delivering the service, but account data is not handed to third-party app platforms for profiling or product analytics under this Policy’s intended model.

5. Hashing and protection of secrets

Sensitive values are protected using modern cryptography. Where applicable, secrets and protected identifiers are hashed using Argon2id and Blake3 rather than stored as reusable plaintext.

Hashing reduces the risk of exposure, but no security measure is perfect. You should still use a strong, unique password and keep your devices secure.

6. Account deletion and GDPR

You may request deletion of your account. Deletion requests are handled in accordance with applicable GDPR erasure rights where they apply.

After your account is deleted, you cannot get your data back. This is permanent and includes licenses and other account-linked entitlements. We cannot restore deleted accounts or reissue deleted license state from user backups once erasure has been completed.

We may retain limited information after deletion where we have a lawful basis to do so, such as security enforcement, abuse prevention, legal claims, or compliance. That can include blacklist records for users banned for reverse engineering or related abuse.

7. Blacklists and abuse records

If you are permanently blacklisted — including for reverse engineering Athena APIs, loaders, modules, or related protected components — identifiers associated with that ban may be logged in an internal database.

Those records exist to stop the banned user from simply creating another account and continuing to abuse the platform. They are used for enforcement and security, not for advertising.

8. Sharing

We do not sell your personal information. We only share information when needed to operate the Services, enforce our Terms, protect security, comply with law, or respond to valid legal process.

9. Retention

We retain account and service data for as long as your account remains active and as needed to provide the Services. After deletion or termination, we keep only what is necessary for security, enforcement, dispute resolution, backups during their normal lifecycle, and legal compliance.

IP addresses and hardware identifiers collected for platform use are processed for the duration of your relationship with Athena and any longer period required for legitimate enforcement or legal purposes.

10. Your rights

Depending on your location, you may have rights to request access, correction, deletion, or restriction of certain personal data, and to object to certain processing. Where GDPR applies, you may also have the right to lodge a complaint with a supervisory authority.

Some rights may be limited where we must retain data for security blacklists, fraud prevention, or legal obligations.

11. International users

If you access Athena from another country, your information may be processed in the locations where we operate our systems. By using the Services, you understand that your information may be handled outside your home jurisdiction subject to this Policy and applicable law.

12. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Services after an update means you acknowledge the revised Policy.

13. Contact

For privacy questions or deletion requests, contact us through our official Discord community or the support channels published on the Athena site.