Privacy Policy
This describes what data the Orikon application and the orikon.pro website collect, why, where it is kept and how to have it deleted. We try to collect as little as possible.
What we collect
| Data | Why | Where |
|---|---|---|
| Login and password hash | signing in | our server |
| E-mail address | confirming the account and recovering access | our server |
| Discord id and nickname | only if you linked it: recovery codes and alerts | our server |
| Collection: prime parts, relics, mastery, the trade journal, planned flips and investments with what you paid | syncing between your computers | your PC; our server when sync is on |
| warframe.market ingame name | showing which trading account a login belongs to | our server |
| warframe.market profile language | if you signed in to the market in the app: the language set in your market profile, sent with the ingame name. It helps us see which countries our users come from | our server, while the account exists |
| Time zone and system language | only with your consent to statistics: your computer's time zone (for example, Europe/Moscow) and the Windows language, when you sign in. They tell us the country. Your IP address is not used for this and not stored | our server, while the account exists |
| Interface language | so mails and bot messages arrive in it | our server |
| IP address and request time | web server technical logs | our server, up to 30 days |
| Page view counter | how many people opened the site and how many pressed «Download», and from which country, as Cloudflare reads it | our server: daily totals only, no addresses and no identifiers |
| Install id | a random number the app creates on your machine the first time it runs: it shows which step people stop at | our server, up to 180 days |
| Steps: installed, launched, signed up, game found, overlay shown, first scan, first price, first trade read | the fact and the date, and no more than one record per step per day. Sent only if you answered «Yes» to the question on first launch | our server, up to 180 days |
| Which tabs of the app were opened, and whether a feature worked | so we can tell what people need from what is simply broken: the name of the tab and the date, at most one record a day. For example «opened the Syndicates tab on 11 September» or «a scan finished and read nothing». How long you spent there and what you looked at is not recorded | our server, up to 180 days |
| Errors in the app | if the app hits an error: its name (for example «TypeError») and the function in Orikon's code where it happened, with the date and the app version. The error's text, file paths and whatever was on screen are not sent. Only with your consent to statistics | our server, up to 180 days |
| Screenshots after the first scans | screenshots during the first three scans of the inventory, relics, mastery and reward screens, to see what the app read and how it showed the result. See «Screenshots of the first scans» below | our server, 30 days |
What we do NOT collect
Your warframe.market password never leaves your computer. It is kept locally, encrypted by Windows (DPAPI) — the file cannot be decrypted on another machine or under another user account. Only your ingame name is sent to our server.
We do not collect screenshots as you play. The screen image is processed on your computer for text recognition and is never uploaded. There is one exception, the first three scans of each kind, described below under «Screenshots of the first scans».
We do not collect the contents of EE.log. Reading the
game log is off by default, happens locally, and its contents are never
transmitted — it contains personal data, which is why the feature is
optional.
The steps and tabs say nothing about what you do in the game. The steps above are «happened / did not happen» marks with a date: what you scanned, what you sold and who you traded with is neither sent nor stored.
The install id is not tied to your computer. It is a random number, not a hardware fingerprint: reinstall the app and the number is a different one, and the old one leads back to nothing.
There are no ads and no third-party trackers: no Google Analytics, no Yandex Metrica, no social network pixels. The page counter is ours and runs on our own server.
Screenshots of the first scans
The app sends us screenshots during the first three scans of each kind: the inventory, relics, mastery and the reward screen. A reward screen gets two: once all the rewards are up, and after you mark the one you took by clicking its card. That is at most fifteen screenshots per install, and none are taken after that.
The screenshot shows the whole screen with the Orikon window on it, scaled down to 1920 pixels wide or less, so it is clear what the app read and how it showed the result. Anything that was on the screen at that moment ends up in it, including chat and nicknames. On the profile screen, where the mastery scan runs, the strip at the top with your name and balance is painted over on your computer, before anything is sent. The app tells you about this before the first screenshot.
Only the developer sees them. They are kept on our server for 30 days and deleted automatically. To switch it off: Settings → Screenshots of the first scans to the developer; switching it off deletes the screenshots already sent from the server straight away.
Who we share with
We do not sell your data and do not pass it to third parties for their own purposes. Sharing happens only as far as running the Service requires:
- Hosting (Timeweb, Russia) — the server itself and the mail server that sends our messages;
- Discord — if you linked an account, our bot sends you direct messages; only the message text and your id are involved;
- warframe.market — price requests go straight from your computer.
How long we keep it
Account data — for as long as the account exists. Web server logs — up to 30 days. Screenshots of the first scans: 30 days. The install id, the steps and the errors — up to 180 days, after which they are deleted; if you delete your account, the link between it and the id goes with it. One-time confirmation and recovery codes — 15 to 60 minutes, after which they stop working.
How to switch it off
The app sends steps and tabs only with your consent: on first launch it asks about it separately and sends nothing until you answer «Yes». Answering «No» deletes what had piled up on your computer, unsent.
In the app: Settings → Help us improve → off. The app then stops sending steps and asks the server to delete everything already sent from your id. Not «we will stop collecting from now on», but «and forget the rest», in one action, with no e-mail and no waiting.
These screenshots have a switch of their own: Settings → Screenshots of the first scans to the developer. Switching it off likewise deletes the screenshots already sent from the server straight away.
The site page counter is switched off by an ad blocker or by blocking scripts: it is a script on the page. There is no separate button for it because it does not know who you are, so there is nothing in it to turn off.
Your rights
- Find out what data of yours we hold and get a copy of it.
- Correct inaccurate data.
- Delete your account together with all related data.
- Withdraw consent to processing — equivalent to deleting the account.
For any of these, write to [email protected] from the address on the account. We reply within 30 days.
The account can also be deleted without writing, right in the app: Account → Delete account. It asks for the password. The account, the cloud copy of the collection, support tickets and your review are deleted; the data on your computer stays, and Settings → My data can export or reset it.
Children
The Service is not intended for anyone under 13 and we do not knowingly collect their data. If you believe a child has given us their data, write to us and we will delete it.
Security
The connection to the server uses HTTPS. Passwords are stored as a salted PBKDF2 hash (120,000 iterations) — the original password cannot be recovered from it. No system removes risk entirely, so please use a unique password.
Changes
Changes are published on this page with a new version date. We will announce material changes in the app or by e-mail as well.