Privacy Policy

ISK Scout ("we", "us") respects your privacy. This policy explains what data we collect, how we use it, who we share it with, and what choices you have. ISK Scout is a free third-party tool for EVE Online players, operated by an individual developer (Intelli H).

1. What we collect

• EVE SSO data. When you log in with your EVE Online account, CCP issues us an OAuth2 access token and refresh token, plus your character ID and character name. We never see your CCP account password. We request only the ESI scopes needed for the features you use (wallet, orders, skills, ship, assets).
• Session cookies. We set eve_session and eve_refresh HttpOnly cookies to keep you signed in. They contain a server-side session ID, not your actual tokens.
• Analytics. We use Google Analytics 4 to measure aggregate page views, Web Vitals (LCP/CLS/INP/FCP/TTFB), scroll depth, engagement, and whether an ad blocker appears to be active. GA4 sets cookies (typically _ga, _ga_*) that pseudonymize you via a randomly generated ID. We do not see your real IP address — Google IP-anonymizes within the EU. In the European Economic Area, the United Kingdom, and Switzerland, GA4 runs in Google Consent Mode: it sets no analytics cookies until you consent to storing information on your device in the consent prompt (see section 6), and until then Google receives only cookieless measurement pings without a persistent identifier.
• Server logs. Our reverse proxy (Cloudflare) logs IP addresses and request metadata for abuse prevention and rate limiting. These logs are kept short-term (Cloudflare's defaults) and not linked to your EVE account.
• Discord linking (optional). If you connect Discord for notifications, we store your Discord user ID and notification preferences.
• Advertising. Ads on ISK Scout are managed by Mediavine. Mediavine and its advertising partners use cookies and similar technologies to serve, measure, and personalize ads. Section 4 lists exactly what they collect and how to opt out.

2. How we use the data

• Operating the features you see on screen (computing routes, dashboard, station-trading).
• Aggregate analytics to improve the tool — we do not look at individual user behavior.
• Rate-limiting and abuse prevention.
• Sending Discord notifications you explicitly opted in for.
• Serving and measuring ads through Mediavine and its partners, including interest-based ads where your privacy choices allow it (see section 4).

We do not sell your data for money, and we do not use it for any purpose unrelated to running this site. However, the interest-based advertising described in section 4 — where advertising partners receive cookie and device data — may count as a "sale" or "sharing" of personal information under some US state privacy laws, such as the CCPA/CPRA. You can opt out at any time (see section 6).

3. Third parties

• CCP hf. (EVE Online publisher) — receives your ESI API requests when we fetch your wallet/orders. CCP's privacy policy applies to the SSO flow.
• Google — receives pseudonymized analytics data (Google Analytics 4), and may also receive advertising data as one of Mediavine's partners. See Google's privacy policy and how Google uses data from sites that use its services.
• Mediavine and its advertising partners — manage the ads on ISK Scout and receive the advertising data described in section 4. See Mediavine's privacy policy and the list of Mediavine Partners.
• Cloudflare — provides CDN, DDoS protection, and IP-based logging. See Cloudflare's privacy policy.
• Discord (optional) — when you link Discord, your Discord user ID is shared with Discord's API for sending DMs.

4. Advertising

ISK Scout's ads are managed by Mediavine. The disclosure below is Mediavine's required privacy language, reproduced as provided — "the Website" and "our Site" refer to ISK Scout.

5. Data retention

• Sessions: 15 minutes (auto-renewed via refresh token for 2 days of inactivity).
• EVE SSO tokens: until you log out or revoke access from CCP.
• Analytics: GA4 default (14 months) before automatic deletion.
• Analytics consent choice (EEA, UK, Switzerland): saved in your browser's local storage (iskscout_ga_consent) for up to 180 days so it also applies on pages without the consent prompt. Making a new choice in the prompt replaces it.
• Advertising cookies and consent choices: stored in your browser for periods set by Mediavine and each partner (see Mediavine Partners). Clearing your browser cookies removes them.
• Discord linking: until you unlink it from Settings.
• Server logs: short-term (Cloudflare's standard window).

6. Your choices and rights

• Revoke EVE SSO. Visit EVE Third-Party Applications and remove ISK Scout. Your tokens become unusable instantly.
• Log out / delete account. Use the account menu, or email us to request full deletion.
• Opt out of analytics. Install Google's GA opt-out browser add-on, or block Google Analytics with a content or ad blocker. In the EEA, the UK, and Switzerland you can also decline in the consent prompt, or change your choice later via the "Manage Preferences" link at the bottom of the page.
• Ad consent (EEA and UK). If you visit from the European Economic Area or the United Kingdom, Mediavine's consent management platform (CMP) asks for your choice before personalized ads are served. You can accept, reject, or choose individual purposes and vendors, and change your decision at any time via the "Manage Preferences" link at the bottom of the page. If you reject, you will still see non-personalized ads.
• Do Not Sell or Share (US). If you live in a US state with an applicable privacy law (such as California, Colorado, Virginia, or Texas), a "Do Not Sell or Share My Personal Information" link appears on the site. It opens Mediavine's privacy notice, where you can opt out of the sale or sharing of your personal information for targeted (cross-context behavioral) advertising. That notice covers Mediavine's ad management only — for anything else, email us.
• Global Privacy Control. In US states that require honoring universal opt-out signals (such as Colorado), Mediavine treats a Global Privacy Control (GPC) signal from your browser as an opt-out and stops tracking, collecting, or processing your personal data for advertising.
• Other ad opt-outs. You can opt out of interest-based ads from many companies at aboutads.info (US) or Your Online Choices (EU), and manage Google's ad personalization in Google Ads Settings.
• Unlink Discord. Settings → Discord → Unlink.
• Privacy rights (GDPR, UK GDPR, US state laws). If you live in the EU, the UK, or a US state with a consumer privacy law (such as California), you have the right to access, correct, delete, and export your data, and to opt out of the sale or sharing of your personal information for targeted advertising. We will not discriminate against you for exercising these rights. Email us and we will respond within 30 days.

7. Children

ISK Scout is intended for EVE Online players, who must be at least 13 (US/Korea) or 16 (EU). We do not knowingly collect data from anyone younger. If you believe a minor has used the service, please contact us so we can remove the account.

8. International transfers

Our servers run in regions chosen by Cloudflare and our hosting provider. Google, Mediavine, and Mediavine's advertising partners may transfer data to the United States and other countries. By using ISK Scout, you consent to these transfers under standard contractual clauses or equivalent safeguards.

9. Changes to this policy

We will update the date at the top of this page when we make changes. Material changes (new third parties, new data categories) will be announced via the in-app banner for at least 14 days.