Privacy
Last updated 28 October 2026. Pluto Coach Ltd ("Pluto", "we") makes Warden. This page covers the Warden desktop app, the Warden mobile app for iOS and Android, the Warden Team service and portal, and this website. See also our terms.
The short version
- The Warden desktop app runs on your computer. Your code and prompts go from your computer to the model provider you choose, on your own account. They do not pass through us, unless your company uses Warden Team's model gateway (below).
- The Warden mobile app is a remote for your company's Warden Team account. It shows your agents' chats and approval requests and lets you answer them and start work in your cloud sandbox. It runs no agent and stores no code on your phone.
- No ads, no analytics, no tracking, no crash reports, no third-party SDKs that collect data, in the apps or on this website. We never sell or share your data.
- Your company decides where its Warden Team service runs: our shared cloud, or a dedicated instance run by us for that company alone.
The Warden desktop app
Warden sends us no usage data: telemetry is switched off in the app's code, with no setting to turn it on. What it does reach:
| What | Why | What we see |
|---|---|---|
The update check (dl.zsguard.com) | To tell you when a new version is out and download it. | Cloudflare, which serves it, handles it like any web request (your IP address, the app version). We keep no record of who checked. |
| Your licence | Checked on your computer. The free edition makes no other call to us. | Nothing. |
| Warden Team, only if you join a team | To fetch your company's policies and skills and keep the work your company has chosen to back up (plans, specs, chats, memory). | What is listed under "Warden Team records" below. |
Your model provider (for example Anthropic, OpenAI or your company's own) handles your prompts and code under its own terms and privacy policy. So do the agents you connect, such as Claude Code or Codex.
This website and the free licence
| Data | Why | Kept |
|---|---|---|
| Your email, name and organisation, your IP address and browser type, when you ask for a licence | To issue and email your licence (contract), and to stop abuse of the free edition (legitimate interest). We may email you about your licence and important changes to Warden. | Until you ask us to delete them. |
| A count of each download (file, version, platform) | To know which versions people use. No IP address or identity is stored with it. | Indefinitely, as counts. |
| What you write to us through a contact form or by email | To answer you. | As long as the conversation needs, then deleted on request. |
This website sets no cookies and runs no analytics. The Warden Team portal sets only the cookies it needs to keep you signed in.
Signing in with Google or Microsoft
If you sign in to the Warden Team portal with Google or Microsoft, we receive your email address and whether the provider has verified it, and nothing else from your account: no contacts, files, calendar or profile data. We use it only to find your existing Warden Team account.
What the mobile app sends, and why
| Data | Why | Kept |
|---|---|---|
| Your work email and password (sent once, over HTTPS, to sign in) | To sign you in to your company's Warden Team account. The password is checked and never stored by the app. | The app keeps a sign-in token in the phone's secure storage (Keychain / Keystore), not your password. |
| A random device id, the phone's model name, platform (iOS / Android) and app version | So you and your company can see your signed-in phones and sign one out. | Until you sign out, the phone is signed out from the portal, or 30 days without use. |
| Your IP address | To slow down repeated failed sign-ins (protection against password guessing). | Failed attempts only, for 15 minutes. |
| Your answers to approval requests and the messages you send to your agents | To carry out what you asked: the answer goes to the machine that asked, the message to your cloud sandbox. | As part of your company's Warden Team records (below). |
The chats, approval requests and project names you see in the app come from your company's Warden Team service. They are shown on the phone and held in memory while the app is open; the app does not write chat transcripts to the phone's storage.
The app can use Face ID, Touch ID or your fingerprint to unlock. That check happens on your phone; no biometric data reaches the app or us.
Warden Team records
Warden Team keeps your company's work in the service your company chose: chats, plans and specs you create, approval requests and answers, and the activity log your company has switched on. Secrets are removed on your machine before anything leaves it and again on the server, and stored records are encrypted at rest. Your company's managers control retention (90 days by default for the activity log) and can delete records. When your seat is removed, your personal work store is erased.
If your company uses Warden Team's model gateway, your prompts and the code your agent sends to the model pass through the gateway on their way to the model provider your company chose, so your company can set budgets and allowed models. We do not keep their content.
The service runs on Amazon Web Services in the EU (Ireland, eu-west-1), with databases at Turso in the same region and Cloudflare in front of it; emails are sent through Amazon SES. A dedicated instance is a separate copy of the service for one company, run by us in the same places, with its own database and keys.
Your rights
For Warden Team records we act for your company (it is the controller, we are its processor); for licences, this website and our own emails we are the controller. Under UK and EU data protection law you can ask for a copy of your data, its correction or its deletion, and object to how it is used. If your company runs Warden Team, ask your Warden manager first: they control your company's records. You can also write to us at ace@wardenofpluto.com, and you can complain to the UK Information Commissioner's Office.
Deleting your account and data
Warden Team accounts belong to your company, so the quickest way to delete yours is to ask your company's Warden manager to remove your seat in the Warden Team portal. That signs every phone out and erases your personal work store (your chats, plans, specs and the phones you signed in with).
You can also ask us directly: email ace@wardenofpluto.com from the address you sign in with, with the subject "Delete my Warden data". We confirm within 30 days. What we delete: your sign-in, your phones' sessions, your personal work store and your answers to approval requests. What your company may keep: chats you shared with your team in its activity log, until its retention period ends (90 days by default) or a manager deletes them, and records the law requires us to keep.
To only sign a phone out, use More, then Sign out in the app, or Signed-in phones in the Warden Team portal.
Children
Warden is a work tool for software teams and is not meant for children.
Changes and contact
We will update this page when what we collect changes, and change the date at the top. Questions: ace@wardenofpluto.com, Pluto Coach Ltd, London, United Kingdom.