Privacy policy

The data controller is the Capsuleers.app team. For any request relating to your data write to [email protected] or reach us through the official Discord server. We reply within 30 days.

When you sign in or link a service we process:

• EVE characters (main sign-in through EVE SSO): the ID and name of every linked character, the ESI scopes you granted, the access and refresh tokens and their expiry. Tokens are encrypted in the database (AES-256) and are never sent to the browser.
• Discord account (optional): your Discord ID, username and the list of community Discord servers you belong to. We only ask Discord for the identify and guilds scopes: we do not receive or keep your email. Discord tokens are not stored.
• Twitch account (optional): channel ID and name, and the status of your EVE Online streams so we can announce them on the Discord servers. Twitch tokens are not stored.
• YouTube channels (optional, up to two): channel ID and title and the latest published video, to announce new videos.
• Profile and preferences: main character, site role (pilot, writer, admin), default tool views.
• Push notifications (only if you turn them on): your browser's push service address and its keys, language, browser user-agent and the topics you chose (articles, sov timers, camped gates, saved hunts). The push service address identifies your device, so we treat it as personal data. A saved hunt is real-time monitoring of what another pilot (or a corporation, or an alliance) does, based on their public killmails: it stays tied to your device, nobody else can see it, and you delete it from the Hunting lens or your profile.
• Content you create: articles, writer applications, submitted screenshots and videos, corporation bulletins, fits, fleet and battle reports, scan and intel shares, haul plans and industry projects, quiz scores.

With the scopes you grant, the site reads from ESI (the EVE Online API) mail, wallet, assets, current location and ship, skills, implants, clones, jump fatigue, planetary colonies, blueprints and industry jobs, Faction Warfare statistics and fleet data. You can turn each service on and off from your profile.

Most of this data is read on demand and shown without being stored. It is only stored when you ask for it: a skill profile imported into the fitting tool, a haul plan (with the inventory of the assets involved), an industry project, a shared incursion ISK report, intel shared with your fleet. For fleet intel the site asks ESI which fleet each of your characters is in (fleet ID and role): the answer is kept in memory for a few minutes at most and is not stored. The donation widget shows on your overlay the donor names and amounts read from your wallet, kept in memory for ten minutes.

Some features process data about players who are not necessarily users of the site:

• Public EVE Online killmails: the characters, corporations, alliances, ships and systems involved, and per-character statistics derived from them (playstyle, activity by space type). We keep them for 90 days.
• Fleet tracking: when a fleet commander turns the tracker on, we record which characters were in the fleet, when and in which ship, for that fleet's report.
• Saved hunts and notifications: characters, corporations or alliances you chose to follow.
• Fleet intel: when a pilot shares a D-Scan, a Local or a Pilot Intel with their fleet, we store its content (the ships seen, the names and affiliations of the pilots in Local with their statistics), the character who shared it, the system and the fleet ID. Only the pilots ESI places in that fleet see it, while they stay in it, and it is deleted after 24 hours.
• r/Eve archive: for public posts on the EVE Online subreddit we store the title, the author's Reddit username, the text, the image, the flair and, about 24 hours after posting, the comments with their authors' usernames. We read them from Reddit's public feeds. A post removed or deleted on Reddit is taken down when we notice it, that is at the comment check; for a later removal, write to us and we will take it down.
• Community Discord servers: our bot records the Discord ID and username of members of the EVE Online Italia and Capsuleers servers to manage roles, nicknames in the [TICKER] Name format and direct messages about the outcome of submissions.

This is public game data or data needed to run the community; we process it on the basis of legitimate interest.

Visible to anyone:

• the character name and corporation that sign a published article;
• the author of public fits, and fits shared through a link;
• fleet and battle reports and scan, intel and ISK report shares, to whoever has the link;
• intel shared with a fleet, with the name of the character who shared it, only to the pilots in that fleet;
• quiz leaderboards, with the character name (not the Discord username);
• the EVE Online Italia community member list, with character name and corporation (not the Discord ID);
• streaming overlays, to whoever has the secret address, which you can regenerate from your profile.

Character, corporation and alliance pages show public EVE Online data.

If you create a share (fleet or battle report, scan, intel, ISK report) while signed in, we record it as yours. This link is not shown on the shared page: only site administrators see it, for moderation.

• Account, sign-in and the tools you use (reading ESI data, saving, sharing, notifications, integrations): performance of the service you request (Art. 6.1.b GDPR).
• Security, abuse prevention, request rate limits, running the community Discord servers and statistics derived from public killmails: legitimate interest (Art. 6.1.f GDPR).
• Traffic analysis with Google Analytics 4: explicit consent through the banner (Art. 6.1.a GDPR), which you can withdraw at any time.
• Push notifications: the consent you give your browser, which you can withdraw from your profile or the browser settings.

The site relies on these providers:

• Fenris Creations / CCP (EVE SSO and ESI): sign-in and game data.
• Discord: optional sign-in, community bot, announcements through webhooks.
• Twitch: channel linking and stream status.
• Google: Google Tag Manager and Google Analytics 4 (only after consent), YouTube (videos embedded from youtube-nocookie.com and reading linked channels), Google Translate (automatic translation of published articles), Firebase Cloud Messaging (push notifications on Chrome and Android).
• Mozilla, Apple and Microsoft: delivery of push notifications on their browsers.
• Cloudflare: content delivery, protection and storage of uploaded images (R2).
• eve-kill.com, EVE Ref, EVE Workbench, eve-scout: public game data (killmails, prices, public fits, wormholes).
• Reddit and GitHub: public content shown on the site.

The site and its database run on servers managed by the Capsuleers.app team. We do not sell data or share it for marketing purposes.

Google, Cloudflare, Discord, Twitch, Reddit, GitHub, Apple, Microsoft and Mozilla are based in the United States. These transfers rely on the EU-US Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission.

• Account data, characters, integrations and content you create: for as long as the account exists. You can delete the account yourself at any time and the deletion is immediate (see the Delete account page).
• Sign-in session: 30 days.
• Public killmails and derived statistics: 90 days.
• r/Eve archive (posts and comments): as long as the post stays published on Reddit, or until you ask for its removal.
• Pilot intel shares: 24 hours. Intel shared with a fleet: 24 hours. Scans shared from Capsuleers.IA: 24 hours. Scans shared from the site's tool: until you ask for deletion.
• Screenshot submissions: pending ones for 30 days, rejected ones are deleted immediately. Video submissions: pending 30 days, rejected 7 days. Approved ones stay published.
• Push subscriptions: deleted when the browser revokes them or after 180 days of inactivity; send log: 90 days.
• Database backups: 14 days. Deleted data can therefore remain in backups for up to 14 days.
• Analytics: according to the retention setting of the Google Analytics 4 property, at most 14 months.

All connections use HTTPS. ESI tokens are encrypted in the database with AES-256 and never leave the server. Sessions are encrypted cookies readable only by the server. Our code does not log IP addresses: it only uses them in memory, for a few minutes, to limit excessive requests; they do pass through Cloudflare, which processes them under its own privacy notice.

We use technical cookies and browser storage to run the site and, only with your consent, Google Analytics cookies. The full list, with names and durations, is in the Cookie Policy.

You have the right to access your data, rectify it, ask for its deletion, restrict its processing, receive it in a structured format, object to processing based on legitimate interest and withdraw any consent at any time. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Some things you can do yourself from your profile: remove a character (its tokens are deleted), unlink Discord, Twitch and YouTube, turn notifications off and change your cookie consent. You can also delete the whole account yourself, immediately, from the Delete account page (https://capsuleers.app/delete-account) or from Profile > Preferences: it removes your characters, tokens, integrations and personal content and anonymises what stays public. To also revoke access on the EVE Online side, use the third-party applications page of your EVE account. For any other request write to [email protected]: we reply within 30 days. Articles already published stay online without your name, signed as Capsuleers.app Staff.

The service is intended for users aged 14 or over; use by anyone under 14 is not permitted. We do not knowingly collect data from children under 14. If a parent or guardian believes a child under 14 has given us data, contact us at [email protected] and we will delete it. For users aged 14 to 18 we commit to explaining how we handle data in plain, clear language (art. 2-quinquies(2) of Italian Legislative Decree 196/2003). Discord login requires at least the minimum age set by Discord (13 or over), and your EVE account is subject to CCP's terms.

The Capsuleers Android app (Google Play) is a Trusted Web Activity: it shows capsuleers.app inside Chrome and is not a separate service. It contains no advertising, analytics or crash-reporting SDKs, and collects no data beyond what this policy already describes for the website. The same account, the same data and the same rights apply; you can delete the account from inside the app (Delete account page). Your analytics choice (cookie banner) applies in the app too; when you accept, Google Analytics receives the usage data described in this policy and shares it with Google. Push notifications work as on the website (Web Push), delegated to the app through Chrome notification delegation: the only permission the app asks for is the optional notifications one, and you can turn it off at any time from the device or from your profile.

This notice may be updated when the site changes. The date of the last update is at the top of the page. Material changes will be announced on the official Discord server and with a notice on the site.