Privacy Policy

ISK Scout ("we", "us") respects your privacy. This policy explains what data we collect, how we use it, who we share it with, and what choices you have. ISK Scout is a free third-party tool for EVE Online players, operated by an individual developer (Intelli H).

1. What we collect

• EVE SSO data. When you log in with your EVE Online account, CCP issues us an OAuth2 access token and refresh token, plus your character ID and character name. We never see your CCP account password. We request only the ESI scopes needed for the features you use (wallet, orders, skills, ship, assets).
• Session cookies. We set eve_session and eve_refresh HttpOnly cookies to keep you signed in. They contain a server-side session ID, not your actual tokens.
• Analytics. We use Google Analytics 4 to measure aggregate page views, Web Vitals (LCP/CLS/INP/FCP/TTFB), scroll depth, and engagement. GA4 sets cookies (typically _ga, _ga_*) that pseudonymize you via a randomly generated ID. We do not see your real IP address — Google IP-anonymizes within the EU.
• Server logs. Our reverse proxy (Cloudflare) logs IP addresses and request metadata for abuse prevention and rate limiting. These logs are kept short-term (Cloudflare's defaults) and not linked to your EVE account.
• Discord linking (optional). If you connect Discord for notifications, we store your Discord user ID and notification preferences.
• Future advertising. We are integrating Google AdSense. Once active, AdSense (and its partners) may set cookies for ad measurement and personalization. EU users will see non-personalized ads (NPA) by default unless we add a consent management platform later.

2. How we use the data

• Operating the features you see on screen (computing routes, dashboard, station-trading).
• Aggregate analytics to improve the tool — we do not look at individual user behavior.
• Rate-limiting and abuse prevention.
• Sending Discord notifications you explicitly opted in for.
• Serving ads (once AdSense is active).

We do not sell your data, and we do not use it for any purpose unrelated to running this site.

3. Third parties

• CCP hf. (EVE Online publisher) — receives your ESI API requests when we fetch your wallet/orders. CCP's privacy policy applies to the SSO flow.
• Google (Analytics + AdSense) — receives anonymized analytics and (future) ad signals. See Google's privacy policy.
• Cloudflare — provides CDN, DDoS protection, and IP-based logging. See Cloudflare's privacy policy.
• Discord (optional) — when you link Discord, your Discord user ID is shared with Discord's API for sending DMs.

4. Data retention

• Sessions: 15 minutes (auto-renewed via refresh token for 2 days of inactivity).
• EVE SSO tokens: until you log out or revoke access from CCP.
• Analytics: GA4 default (14 months) before automatic deletion.
• Discord linking: until you unlink it from Settings.
• Server logs: short-term (Cloudflare's standard window).

5. Your choices and rights

• Revoke EVE SSO. Visit EVE Third-Party Applications and remove ISK Scout. Your tokens become unusable instantly.
• Log out / delete account. Use the account menu, or email us to request full deletion.
• Opt out of analytics. Install Google's GA opt-out browser add-on or use a browser-level Do-Not-Track / ad blocker (we honor it implicitly).
• Unlink Discord. Settings → Discord → Unlink.
• GDPR/CCPA rights. If you live in the EU, UK, or California, you have the right to access, correct, delete, and export your data. Email us and we will respond within 30 days.

6. Children

ISK Scout is intended for EVE Online players, who must be at least 13 (US/Korea) or 16 (EU). We do not knowingly collect data from anyone younger. If you believe a minor has used the service, please contact us so we can remove the account.

7. International transfers

Our servers run in regions chosen by Cloudflare and our hosting provider. Google services may transfer data to the United States. By using ISK Scout, you consent to these transfers under standard contractual clauses or equivalent safeguards.

8. Changes to this policy

We will update the date at the top of this page when we make changes. Material changes (new third parties, new data categories) will be announced via the in-app banner for at least 14 days.