SC-TOOLBOX
Privacy
What SC-Toolbox stores about you, why, for how long, and how to get it or delete it.
Who runs this
SC-Toolbox is a free hobby project, run by one person. It has no ads, no analytics and no trackers, and nothing is sold or shared for marketing. Questions or requests about your data: [email protected].
Without an account
The public pages and the free tools work without signing in. They set no cookies and store nothing about you.
What your account stores, and why
- Your account: the display name and avatar from Discord, your Discord id and name (to sign you in), when you joined and last signed in.
- Your RSI account, if you link it: handle, citizen record, moniker, avatar and enlistment date from your public RSI page, and your org memberships and ranks from it (to show your orgs and who may plan their events).
- What you add in the app or launcher: your hangar and its loadouts, blueprint collections, event sign-ups and the events you create (drafts stay visible to you only).
- Loadouts you share: when you copy a loadout's share link, anyone with the link can see that loadout (its name, ship and parts) and your display name, until you stop sharing it or delete it.
- Your calendar feed, if you turn it on: only a fingerprint (hash) of its secret link, so the link itself isn't stored. Anyone you give the link to sees the events you signed up for; make a new link or turn it off in Events at any time.
- Play stats, if you upload them from the launcher: per play session your character name, times, missions, deaths, blueprints received and the other counters shown on the Stats page.
- Signed-in launchers: which launcher you signed in, what you allowed it to do, and when its sign-in expires.
- Security log: sign-ins, permissions you granted, RSI verification and account changes, with the IP address and browser of each. It is there to spot misuse of your account.
The legal basis is running the service you signed up for (GDPR art. 6(1)(b)), and for the security log, keeping accounts safe (art. 6(1)(f)).
Cookies
Signing in sets two cookies: the session, and a "remember me" cookie that keeps you signed in for 30 days. Both are needed for the account to work; there are no others.
Who else sees it
- Discord signs you in. SC-Toolbox only reads your Discord id, name and avatar.
- RSI: your public RSI and org pages are read to verify and sync your account. Nothing is sent to RSI about you.
- Members of your orgs see your name, rank, roles and event sign-ups for that org's events.
- An org's Discord channel, if its leaders connect one, gets notices of new and changed events: the title, time, description, muster point and comms. No member names.
How long it is kept
- Your account and everything you added or uploaded: until you delete it. Stats can be deleted on their own from the Stats page.
- Security log: 12 months.
- Launcher sign-ins: 30 days after the launcher last used them, or until you sign it out; remember-me sign-ins: 30 days after last use.
- RSI verification codes: until they expire (one hour).
Your rights
You can see and correct your data in the app, download all of it as a JSON file from Account settings, and delete your account there, which deletes everything above right away. Security log entries stay for their 12 months without your account attached. You can also complain to your data protection authority.