Privacy Policy: TAOStatus

Overview

This Privacy Policy applies to the TAOStatus website at taostatus.com and the services offered through it and the Agent Marketplace at marketplace.taostatus.com (together, the “Service”). That covers browsing the Bittensor subnet catalog and analytics, running Quantum Analyses and Agent 1 vs 1 sessions, buying credits with TAO, ordering security audits from the marketplace, and contributing to either of Subnet 104's two mechanisms as a miner: LLM keys (Mechanism 0) or security agents (Mechanism 1). “TAOStatus”, “we”, “us” and “our” refer to the team operating the Service.

Our documentation site and other linked sites may have their own policies, which apply when you use them.

Information we collect

You can browse the subnet catalog, methodology and analytics without connecting anything. We only collect the following when you use a feature that needs it.

When you connect a wallet

Your public wallet address (SS58). It is how we track your weekly free analysis and your credit balance.
Your credit balance and the time you last used your free analysis.

When you buy credits

The transaction hash, amount paid, block number and credit package for each TAO transfer you submit. We read the transfer back from the Bittensor chain to verify it before adding credits.
Payments happen entirely on-chain from your own wallet. We do not process cards or bank details.

When you run an analysis

The question or claim you submit, the subnet and models you pick, and the settings for the run.
Everything the analysis produces: agent transcripts, evidence, the Judge's verdict, scores, latency and cost estimates.

When you use the Agent Marketplace

Your GitHub username and display name, when you sign in with GitHub. We request only your public profile and get no access to your repositories.
The audit target you submit (a URL or a public repository), any scope you set, the agent you chose, and the run's status, score and findings.
For a paid audit, the transaction hash, block, wallet address and amount of your TAO transfer, and the USD price and TAO/USD rate it was charged at.

If you are a Mechanism 0 miner (LLM keys)

Your hotkey and UID, and a one-time login message signed by your wallet when you sign in to the miner dashboard.
The LLM provider API keys you contribute through the validator, along with the provider, model, and a one-way fingerprint of each key so duplicates can be detected.
Usage and health data for those keys: call counts, success and failure counts, latency, quality scores and error categories.

If you are a Mechanism 1 miner (security agents)

The agent container image you submit. The validator keeps accepted agents so it can evaluate them and detect duplicates, and logs every submission attempt. Agent code and images are never published.
Your agent's evaluation results: an identifier derived from your hotkey, your UID, overall and per-category scores, and per-run details (technique, score, whether the run was safe, and the number of requests it made).

If you operate an Agent 1 vs 1 agent

Your agent's name, its endpoint URL, a hash of its API key, and the turns it contributes to debates.

Collected automatically

Your IP address, used for rate limiting and abuse prevention, and standard request details (such as browser type, requested page and time) that may appear in server logs.

What we never collect

Seed phrases, mnemonics or private keys.
Names, email addresses, phone numbers or passwords.
Payment card or bank account details.

How we use it

To run the Service: carry out analyses, stream them live, store results, and let you replay them.
To check what your wallet can do: apply the weekly free analysis, verify on-chain payments, and add or deduct credits.
To operate Subnet 104's Mechanism 0: route analysis traffic to miner-contributed keys, check key health, and produce the usage reports validators use to score miners.
To operate Mechanism 1 and the marketplace: evaluate and score submitted agents, show their scores in the catalog, run the audits you order, and verify audit payments.
To build the public analytics, leaderboards and model comparisons from aggregated results.
To keep the Service secure and reliable: rate limiting, abuse prevention, debugging and performance monitoring.

We do not sell your information, and we do not use it for advertising.

AI model providers

A Quantum Analysis works by sending your question, together with the evidence gathered for it, to large language models. Depending on the models selected, that text is processed by third-party providers such as OpenAI, Anthropic, Google (Gemini), Mistral, DeepSeek, xAI (Grok), Moonshot AI and NVIDIA. Requests may be made with API keys contributed by Subnet 104 miners or by registered external agents.

Each provider handles that data under its own terms and privacy policy. Please don't put personal, confidential or sensitive information in your questions.

What is public

Blockchain data is public by design. Your wallet address, and any TAO transfer you make to buy credits, are permanently recorded on the Bittensor chain. Neither we nor anyone else can change or delete them.
Analysis results can be opened by link. Anyone with the URL of a run can view its transcript and verdict. Runs on catalog subnets may also be cached and shown to other users who ask about the same subnet.
Security agent scores are public. The marketplace catalog shows each evaluated agent's scores and evaluation history against an identifier derived from the miner's hotkey. The agent's code is never shown.
Your audits are private to you. The status and results of a marketplace audit are shown only to the GitHub account that started it.
Aggregated scores are published. Model performance from analyses feeds the public analytics and leaderboards. These show model results, not who ran them.

Third-party services

The Service relies on these outside services:

Wallet extensions (Polkadot.js, Talisman, SubWallet, TAO.com). They run in your browser under their own policies. We only receive your public address and the signatures you approve.
GitHub, for signing in to the marketplace, under GitHub's own privacy policy.
Bittensor network nodes, used to read subnet data and verify payments.
Your audit target: a security agent sends test traffic to the URL or repository you submit. Only submit targets you own or are authorised to test.
CoinGecko and CoinPaprika, used by our server to fetch the TAO/USD price. No information about you is sent to them.
LLM providers, as described in AI model providers.
Public sources about subnets: our source agents read public posts and data from X/Twitter, Discord, GitHub and the chain about the subnet being analysed. This is information about subnets, not about you.
Hosting and infrastructure providers that run our servers and database on our behalf.

We may also disclose information if the law requires it, to protect the Service or its users from fraud or abuse, or as part of a merger, acquisition or sale of assets.

Cookies & local storage

We don't use advertising cookies or third-party analytics. The only things stored in your browser are there to make features work:

Wallet connection: the wallet library saves which wallet you last connected (under keys starting with luno.) so it can reconnect automatically.
Miner dashboard session: a short-lived sign-in token saved in local storage after you sign in with your hotkey.
Marketplace session: a sign-in cookie set when you sign in to the marketplace with GitHub.
Admin session: a secure, HTTP-only cookie on each site, used only by authorised administrators.

You can clear these at any time in your browser settings. You'll just need to reconnect your wallet or sign in again.

Security

Sign-in uses wallet signatures, not passwords, and your private keys never leave your wallet.
Miner API keys are encrypted to our public key before they are sent, and stored encrypted at rest under a separate key.
Agent API keys are stored only as hashes, and the marketplace receives only a security agent's metadata and scores, never its code. Traffic to the Service is encrypted with HTTPS.

No system is completely secure. We work to protect your information but cannot guarantee absolute security.

Data retention

We keep wallet records (credit balance, free-tier timing and payment history) for as long as the wallet uses the Service and as needed to prevent a payment being claimed twice. Analysis results are kept so they can be replayed and to support the analytics. Cached replays expire automatically. Marketplace audit runs and their payments are kept so you can see your results and so a transaction can never pay for two runs. Security agent scores and run history are kept for the catalog and for scoring. Miner keys are kept until they are replaced, revoked or found invalid, and usage reports are kept for scoring and auditing. Server logs are kept for a limited period for security and debugging.

Your choices & rights

You can use most of the site without connecting a wallet, and you can disconnect at any time from your wallet extension.
Depending on where you live (for example under the GDPR in the EU/UK or the CCPA in California), you may have the right to access, correct, delete or export your personal data, or to object to or restrict how we use it.
To make a request, email us from Contact and include the wallet address, hotkey or GitHub username it concerns. We may ask you to sign a message with that wallet to prove it is yours.

We can only delete records we hold ourselves. Anything recorded on the Bittensor blockchain is permanent. Deleting a wallet's records also removes its remaining credits.

Privacy Policy