Privacy & your data

AssetSafety is a third-party tool for EVE Online. It is not made by, endorsed by, or affiliated with CCP. EVE Online is a trademark of CCP hf.

What we read

Only what a feature needs, and only after you log in through EVE's own login page. We never see your password, and we never ask for it.

• Signing in: your public character info — name, character ID, corporation and alliance.
• Wallet: that character's balance and journal.
• Assets: what each character owns and where it is, plus the names of structures you can dock at.
• Structures (opt-in, set up by a Corp Liaison): a corporation's structures, its structure, skyhook and moon-mining notifications, its moon extractions (moon, timers and ore mix), its skyhooks (state, timers, reagent stock), and the roles of the character connecting it. If the corp sets up calendar reminders: the title, time and owner of corporation and alliance calendar events (personal calendar events are looked at only to tell them apart and are never stored).
• Market (opt-in): your orders, and the corp markets that character can see.
• Corp wallets (opt-in, by a character with the Accountant role): the corporation's wallet balances, journal and market transactions.
• Corp assets (opt-in, by a character with the Director role): everything the corporation owns, its hangar and wallet division names, and the names given to its ships and containers.
• Contracts: the contracts each character issued, accepted or was assigned, with the items in them. Read with your normal login.
• Corp contracts (opt-in, by a character with the Contract Manager, Accountant or Director role): the contracts the corporation issued, accepted or was assigned, with the items in them, and that character's roles. That connection can also open a contract in that character's game client when you press Open in game.
• Your calendar: the events each character can see in its own in-game calendar (personal, corp, alliance, faction and server events), next to your extractor, order and contract expiries.
• Planetary industry (opt-in): your colonies. If you share a character's PI with your corp, the corp's officers see that character's name, products per day and extractor status (not planets or systems); you can stop at any time.

Everything we use today is read-only. Nothing in EVE's API can move ISK or items, so an AssetSafety token cannot take anything from you — the worst a leaked token could do is read what is listed above. You can revoke it yourself at any time (see below).

Reusing a permission you already gave. When you connect a corp tool or switch on market or planetary industry, and one of your own characters has already given us the EVE permissions it needs, we offer to use that character instead of sending you through EVE's login again. It is always a button you press, it only lists characters linked to your account, and it works only while EVE still honours that permission. We never ask EVE for more than the tools you picked.

What we keep

• The data above, refreshed on a schedule — wallet every 30 minutes, assets hourly, market and structures more often.
• The access tokens EVE issues for each linked character, in our own database on our own server.
• Discord webhook URLs you add for alerts, encrypted. We never display them back to you or to anyone else, and the alerts tool never prints them.
• Alerts we have already sent, so you never get the same one twice.

Nightly backups are kept for 14 days. Anything you delete can therefore still exist in a backup for up to two weeks before it ages out and is overwritten.

Deleting your data

• One character: open its page and use Remove this character. That deletes its wallet, assets and tokens here and tells CCP to revoke our access. Your other characters are untouched.
• Everything: Dashboard → Delete my account. Same, for every character at once.
• Straight from CCP: developers.eveonline.com → Authorized Applications → revoke AssetSafety. That stops us reading anything, whatever our own database says.

If a character was your corp's only connection, removing it also deletes that corp's alert settings — nobody would be left who could manage them. The confirmation page tells you before you commit.

Cookies, logs and statistics

• One session cookie, to keep you logged in. No advertising or tracking cookies.
• Our server keeps ordinary request logs (IP address, page, time) for security and troubleshooting.
• Cloudflare serves the site and gives us aggregate, cookieless traffic counts. We do not build profiles of visitors.

Contact

Questions about your data, a deletion you cannot make yourself, or anything that looks like someone impersonating AssetSafety: eveassetsafety@gmail.com. For impersonation, please also say so on the Discord so other players see it.

Changes

If this page changes, the change is listed in the #changelog channel of the AssetSafety Discord. This version: 2 October 2026.