Your information

Privacy Notice

Version October 2, 2026. What changed:

• Section 4 lists every way Claude Code can be signed in, including a gateway token, and scopes Anthropic's retention and training settings to the sign-in you use. Section 6 lists the cloud provider or gateway you sign in with as a recipient.
• Section 2 has two new parts: what we receive when you publish a world from the Desktop App, and what we keep when you play a published world or join a room without an account. Sections 3, 5 and 8 match them, and section 5 adds featuring Public worlds in Antelier's own posts (Terms, section 9).
• Section 1 names antelier.dev, where published worlds are served, and states that Antelier LLC is a Missouri limited liability company.
• Section 2 ("Security and network information") adds Cloudflare request logs, kept 7 days for debugging and security, which include your IP address; cookies and sign-in headers are redacted in them. The page-totals paragraph of section 2 and sections 8, 9, 10 and 12 match it.

Earlier version: September 25, 2026.

1. Who we are and what this covers

Antelier is an early-stage product for making games, worlds and interactive experiments. It is operated by Antelier LLC, a Missouri limited liability company (details in the Terms). Contact hello@antelier.co.

This notice covers the website at antelier.co, the hosted workspace at preview.antelier.co, published worlds and their files at antelier.co and antelier.dev, sign-in, the emails we send, and the Antelier desktop app. Terms such as "Workspace," "Desktop App" and "AI Provider" have the meanings in the Terms of Service.

2. What we collect online

Signing up

Your email address; your optional answer to "What would you make?" (up to 500 characters); your optional answer to "How did you hear about Antelier?" (from a fixed list); your confirmation that you are 18 or older; your agreement to receive access emails; the dates you signed up, were invited and accepted; and your access status. We refuse common temporary-inbox domains and treat aliases of one inbox (for example, dots and "+tags" in Gmail) as one entry. A hidden form field detects automated signups; if it is filled, the signup is not stored. If you sign up again with an address that already has a Workspace, the page answers as for anyone else and we email that address a sign-in reminder.

Google sign-in

If you choose "Continue with Google," Google tells us your email address, a Google account ID, and that Google verified your email. We keep your email and a one-way hash of the Google account ID. We ask Google for nothing else. Google's handling of your sign-in is covered by Google's privacy policy.

Your workspace and hosted projects

Workspace name; hashed access, session and recovery keys (we never store the keys themselves); hashed IDs of the Google accounts that can sign in; the terms version you accepted and when; hosted projects, their revisions, assets and pending previews; Publications, the creator credit you enter and whether you allow Remixes; and player saves for Publications. If a Google account is linked to your Workspace with its recovery key, we email your signup address to say which Google account was linked. If we removed a Google account that was linked without the recovery key, we keep its hashed ID with your Workspace so it asks for the recovery key instead of starting a new Workspace.

Publishing a world from the desktop app

When you publish a world, we receive the files of the project's newest version, its title, whether it is Unlisted or Public, its poster and trailer if it has them, and which world it was remixed from, if any. Its page shows your Workspace name as the creator credit, unless it is the default name. We keep the world until you unpublish it or delete your Workspace. Anyone with its link can play it and download a copy to remix (see the Terms).

Playing published worlds

If you open or play a published world, or join one of its rooms, without an account, we do not ask who you are. A room keeps, for its life (at most 6 hours): a random player ID; the name Antelier assigns you, such as "Rapid Fox"; one-way hashes of the keys that let you return to the room; the game progress the world records for each player; and the room's shared game state. All of it is deleted when the room ends. Your saved progress in a world stays in your browser (see Cookies & storage). We count plays, remixes and room joins (by outcome, such as joined or full) as totals per world; to count a play or remix once per network, the server holds your network address in memory for up to 30 minutes and never stores it. World page views are counted like other public pages (below). Your IP address is otherwise handled as described in "Security and network information." If you report a world, we keep the reason, the message you write, and which world and version it is about.

Connecting the desktop app or Unreal

When you connect the Desktop App or the Unreal connector to your Workspace, we receive a one-way hash of your installation's private secret, the project's ID and title, and the email of the Google account you signed in with (shown back to you on the code page). We keep a record linking the hashed installation and project to your Workspace so another account cannot take it over.

Help, feedback and reports

The category and text of messages you send through Help & feedback, and the Publication they are about, if any. These messages are not linked to your Workspace, so include your email address if you want a reply. Do not include access keys or unnecessary personal information. Emails you send to hello@antelier.co reach our inbox, hosted by Google (Gmail).

Email delivery

To send access emails we keep the recipient address, message type, delivery status and our email provider's message ID. If an address bounces, complains or is suppressed, we keep the address and reason so we never email it again.

Page visit counts (no cookies)

For the public pages on antelier.co, our server adds each page view to daily totals: which page, the referring website's domain (for example reddit.com, never the full address) and a campaign tag if the link had one (such as ?ref=newsletter). No cookie, identifier, script, IP address or browser detail is stored with these totals, and a total is not linked to you; the 7-day request logs are kept separately. Requests with Do Not Track or Global Privacy Control, automated crawlers and link prefetches are not counted.

Optional usage measurement (off unless you allow it)

If you allow it, the website or Desktop App sends a fixed set of milestone events (such as opening the demo, creating a project or a failed generation) with a random identifier for the browser tab. It sends no email address, prompt, project content, page address, screenshot or recording. The identifier is not linked to your Workspace or signup. Turning measurement off stops new events. Do Not Track and Global Privacy Control keep it off.

Security and network information

Every request reaches our hosting provider with your IP address, browser and request details. Our hosting provider, Cloudflare, keeps a log of each request for 7 days so we can find errors and investigate abuse: the time, the method, the address requested (its path and query), the response status, any error, your IP address, browser details, and the approximate location and network Cloudflare reports. Cookies and the sign-in headers that carry access keys and tokens are replaced with "REDACTED" in these logs, and request bodies are never logged. A room's invite code and the keys that let a player return to it can appear in these logs; they stop working when the room ends. Apart from these logs, we do not store raw IP addresses. To limit abuse we store a one-way hash of your IP address combined with a time window (a day, an hour or a minute) and a count, and delete it within an hour after the window ends. These hashes are pseudonymous, not anonymous: someone with your IP address could match them. Per-minute request limits are counted in the server's memory only and never stored.

3. The desktop app: what stays on your computer and what leaves it

The Desktop App keeps its data in %LOCALAPPDATA%\AntelierCreatorPreview\data on your computer. That includes local workspaces, projects and their versions, Studio chats, captured screenshots, turn logs that contain your prompts and the AI's replies, and numeric usage records. We cannot see this data. Deleting a Studio project moves it to a trash folder inside the data folder, where you can restore it; delete that folder to remove it permanently. Unreal projects stay where you made them.

Information leaves your computer only in these cases:

• To your AI Provider when you make an AI request (section 4).
• To Poly Haven, when you search or add library assets. Your computer contacts Poly Haven directly, so Poly Haven receives your IP address and the assets requested.
• To Antelier, when you publish a world, when you connect a project to your Workspace, and when you allow optional measurement (section 2).

4. AI providers

Antelier does not run its own AI model. The Desktop App uses your AI Provider account. Today that is Anthropic's Claude, reached through Claude Code signed in the way you set it up: your Claude plan, an Anthropic API key, a cloud provider account that serves Claude (Amazon Bedrock, Google Cloud Vertex AI or Microsoft Foundry), or another sign-in you set up in Claude Code, such as a gateway token, in which case the gateway's operator and its terms also apply.

• What is sent: your message and conversation, relevant project files and scene details, and screenshots of your project that help the AI check its work.
• Whose terms apply: Anthropic, the cloud provider for a cloud account, or the gateway's operator for a gateway sign-in, receives this under its terms and privacy policy with you, not under a contract with Antelier. For Claude plans, Anthropic says it keeps consumer data for 30 days if model training is off and up to 5 years if it is on. An Anthropic API key, cloud account or gateway is covered by your agreement with Anthropic, the cloud provider or the gateway's operator, which sets its own retention. Anthropic says it keeps API usage under its commercial terms for 30 days as standard. Claude Code keeps session transcripts on your computer for 30 days by default. Claude Code may send its own usage metrics and error reports to Anthropic and its service providers.
• Training: Antelier does not train AI models on your content and does not give your content to anyone for training unless you join the optional Data Program, which is not open. With a Claude plan, Anthropic trains on consumer sessions unless you turn model training off in your Claude privacy settings. Anthropic says that, by default, it does not train its models on what is sent to it under its commercial terms, which cover Anthropic API keys. If you work with Unreal Engine projects, turn model training off (see the Terms).
• Credentials: Antelier does not ask for, read, store or send your AI Provider password, API key or sign-in token; Claude Code uses them on your computer.
• Antelier AI credits (planned; not active): if we later offer paid plans in which Antelier provides the AI, your prompts, project context and screenshots for those requests would go to the AI provider under Antelier's own agreement with it, and payment details would go to a payment processor. Nothing like this is active and billing is not live. Before any such plan starts, we will update this notice to name the provider and payment processor, their data terms and training settings, and how long the data is kept.
• Hosted AI: the Hosted Service does not send your content to any AI provider. If that changes, we will name the provider before you use it and update this notice.

5. How we use information

We use information to:

• send your access link and the service emails you asked for;
• create and run your Workspace, sign you in and keep your Access Credentials working;
• store, show and deliver your hosted projects, Publications and player saves, and run multiplayer rooms;
• show Public worlds, with their creator credit, in Antelier's own posts, streams, newsletters and pages, as the Terms (section 9) allow;
• connect the Desktop App to your Workspace;
• answer your messages and review content reports;
• prevent abuse, secure the Service and investigate problems;
• understand, in totals, which channels bring people and where the product fails (page counts and, if you allow it, measurement);
• comply with law and enforce our Terms.

We do not use your information for advertising, sell it, build profiles for others, or make decisions that have legal or similarly significant effects about you. Signing up does not subscribe you to a newsletter or marketing email.

6. Who receives information

Hosting and email providers process information for us under their terms. They may process it outside your state or the United States. We may also disclose information when the law requires it, to protect people's safety or the Service, to investigate fraud or abuse, or as part of a transfer of Antelier to a successor, which would stay bound by this notice for information collected under it. On September 25, 2026, Antelier and the information collected for it were transferred to Antelier LLC, which now operates it under this notice.

7. No sale, no ads; privacy signals

We do not sell personal information. (The optional Data Program, if it opens, licenses only de-identified data from people who opt in.) We do not "share" it for cross-context behavioral advertising, as California law uses that term. We do not use third-party advertising, analytics or tracking scripts, pixels or session recording on our pages, and we do not let third parties collect personal information about your activity across sites through Antelier. We honor Do Not Track and Global Privacy Control: they keep page counting and optional measurement off.

8. How long we keep information

Copies you downloaded, Remixes others made under your permission, and data held by your AI Provider are not controlled by these periods.

9. Security and breach notification

We store access, session and recovery keys only as one-way hashes; use HTTPS; set cookies as Secure and HttpOnly; limit request rates; keep operator tools behind a separate key; and do not log request bodies. Our request logs are kept 7 days with cookies and sign-in headers redacted (section 2, "Security and network information"). No system is perfectly secure. If a breach affects your personal information, we will notify you and regulators as the law requires, including under the laws of Missouri and California.

10. Your choices and rights

Everyone

You can:

• remove your signup with "Remove my signup" in the browser you used, or decline from your access link;
• delete hosted projects in My projects;
• turn measurement on or off at any time;
• sign out everywhere, or recover your Workspace to replace its keys (recovery also ends every other session and Unreal connection, removes Google accounts linked with the recovery key, and resets shared play links; Published worlds stay public);
• ask us to access, correct, delete or export your information, or to close your Workspace, by writing to hello@antelier.co. You can also delete your Workspace yourself from your library.

We answer within 45 days. We verify requests in a way that fits the request, for example by replying to the address on file or asking you to act from your signed-in Workspace. Never send us your recovery key. We will not treat you differently for using these rights.

Residents of states with privacy laws

Several states give residents rights to know, access, correct, delete and port their personal information, and to opt out of sale, targeted advertising and profiling. Antelier is below the size thresholds of those laws today, but we honor these requests from everyone. We do not sell personal information, do targeted advertising or profile people for significant decisions, so there is nothing to opt out of; privacy signals are honored anyway. If we deny a request, you can appeal by replying to our decision; we will answer the appeal within 60 days. You may use an authorized agent; we may ask the agent for proof of authority and ask you to confirm your identity.

California residents

In the last 12 months we collected these categories: identifiers (email address, hashed account IDs, hashed network addresses, and IP addresses in request logs kept 7 days); customer records (Workspace name); internet or network activity (security records, request logs, page totals, optional measurement); and content you submit (projects, messages, optional idea). Sources: you, your browser and Desktop App, and Google if you use Google sign-in. Purposes: section 5. Recipients for business purposes: section 6. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you. Retention: section 8. Do Not Track: we treat a Do Not Track signal the same as Global Privacy Control.

11. Children and teens

Antelier is for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us information, contact hello@antelier.co. We will delete it and close any Workspace. A future teen or family release will come with its own notice and protections.

12. Where Antelier is offered

Antelier is operated from the United States and offered to people in the United States. It is not offered in the European Union, the European Economic Area, the United Kingdom or Switzerland. Our providers may process information in the United States and other countries.

Where it is not offered, the refusal page has an "I'm interested" button with an optional answer to "What would you make?" (up to 280 characters). We keep only the country Cloudflare reports for the visit, the day and that answer: no email, name, IP address or browser details. The visit itself appears in our 7-day request logs, which never include the answer. Please leave personal information out of the answer; one that contains an email address is refused. To limit abuse, a one-way hash of the network address and day is kept until the end of that day.

13. Data program

We do not sell the signup list. We do not use your project content to train an Antelier model. We do not license your content or data to anyone unless you join the optional Data Program. The program is not open, and nothing is collected for it. If it opens:

• Joining will be optional, off by default, and need a separate consent for each purpose. Accepting the Terms is not consent.
• Categories and sources: only material you choose (assets and your own code or checks) and, for players who separately agree, game inputs quantized to game ticks, game state and relative timing on eligible hosted worlds; aggregate statistics.
• Purpose and recipients: de-identified datasets and aggregate statistics licensed to AI research organizations and dataset marketplaces under written contracts that forbid re-identification.
• De-identification commitment: we will keep and use program data only in de-identified form and will not try to re-identify it, except to test whether our de-identification works, and we will require every recipient to make the same commitment. Hashing is not treated as anonymization. Aggregate statistics suppress small groups; the minimum group size will be stated before the program opens.
• Never included: account data, prompts, AI output, sensitive or health information, accessibility settings, voice, camera, chat, precise location, IP addresses and device identifiers.
• Leaving: you can leave at any time in program settings or at hello@antelier.co. Collection stops at once, and your material is removed from our program store and future releases within the period the program terms state. Recipients must delete it on notice where they can. Models already trained cannot be undone.
• Who: adults 18 or older in the United States only.
• No retroactivity: nothing collected before you join, including anything collected under this notice, is included. Each consent is recorded with its version and time.

We will update this notice at least 14 days before the program opens.

14. Changes to this notice

We will post changes here with a new version date. If a change materially affects how we use information we already have, we will tell you by email or in the product before it takes effect and ask for your consent where the law requires. See Cookies & storage for what the site stores in your browser.

15. Contact

Privacy questions and requests: hello@antelier.co.