Privacy Policy

In short

• No ads, no analytics, no third-party requests from your browser.
• Planners work without an account; the server works out your numbers and keeps nothing beyond the web server log.
• An account holds your email, a password hash, your signed-in devices and what you choose to save. You can delete it at any time.
• We don't sell your data. Apart from what you publish, it goes only to the services that run the site, and to Discord if you connect it for notifications or add the fleet bot.

Who runs this site

PSS2.org is a free fan project run by one person, Mikhail Kolembet. For anything about your data, message me on Discord (kolembet).

Without an account

Every planner and database works without signing up. A planner sends what you pick to the server in the page address, gets the numbers back and keeps nothing; the address stays only in the web server logs (see Server logs and backups). The daily Crew Puzzle on the site works the same way: your guesses go to the server in the page address so it can check them, and stay only in those logs (playing it in Discord is different, see Discord). Your browser also remembers your custom training plan, ship layer toggles, the edit key of a layout you published and your Crew Puzzle guesses and stats. The training plan goes out with each planner request; the edit key goes out when you open the edit link or claim your layouts into an account; layer toggles and Crew Puzzle stats never leave the browser. A plan you save before signing in waits in that browser tab for up to an hour; it and a short status message after a reload are gone when the tab closes.

With an account

We keep:

• your email address and a password hash (argon2id; the password itself is never stored);
• your settings: faction, ship level and whether to use them on filters;
• for each signed-in device: the browser's user agent string, when it signed in and when it was last active, so Devices can show and sign it out;
• the plans you save;
• which gallery layouts are yours: published while signed in or claimed in My layouts;
• the players you link: the player, their ship, the Market listing that proved the link and its seller name, and LOOKING FOR FLEET if you turn it on;
• if you connect Discord for notifications: your Discord user ID and username, the direct message channel, when you connected and whether messages stopped reaching you; your notification settings, TOP thresholds and price watches; and the notifications waiting to be sent or already sent (see Discord);
• if you manage a fleet bot: the Discord server and channels you connect it to, the events you turn on, and a record of changes to these settings with the account, player and time (see Discord).

Accounts are for people 16 and older. If you know of an account made by someone younger, message me on Discord (kolembet) and I'll delete it.

We don't store your IP address with your account. Limits on sign-in, codes and email count attempts in server memory by IP address and by the email address typed into the form; daily gallery limits on publishing, likes, opens and reports count by a keyed hash of the IP address. None of it is written to disk, and all of it is lost on restart. Player link limits use the record of link requests (see How long we keep things).

Cookies

All three are needed for things you ask the site to do, so there is no cookie banner. There are no advertising or analytics cookies.

What is public

• Layouts you publish: the ship with its crew and modules, the author name or linked player you pick, the date, hearts and opens.
• A linked player shows a Verified mark, and LOOKING FOR FLEET if you turn it on, wherever the site prints that player's name.
• The Players section copies the game's public rankings and league rosters: name, avatar, level, trophies, league, fleet, fleet changes and recent activity. It is collected whether or not the player has an account here and is kept with its history without a time limit.
• The Market section keeps public listings with seller names and sales history without a time limit. The listing that proves a player link is one of them.

Players and Market data come from the public Pixel Starships 2 API.

Email

Sign-up codes, password reset codes, email change codes and account notices, such as someone trying to sign up with your address or a linked player moving to another account, are sent through Resend. Resend receives your address and the message. We don't send newsletters.

Discord

Notifications are for accounts with a linked player, and only about that player, your Market listings and your price watches. CONNECT DISCORD takes you to discord.com, where you let PSS2.org see your username and add itself to your Discord apps, which lets it message you. We get your Discord user ID and username; the access token Discord hands back is used once to read them and is not kept. Our bot sends each message through Discord, which delivers and stores it like any direct message under Discord's own privacy policy. DISCONNECT deletes your Discord ID, username and the notifications still waiting; your notification settings and price watches stay until you change them. PSS2.org stays in your Discord apps until you remove it there.

The fleet bot is for verified players of a fleet, Major or above. ADD TO DISCORD SERVER takes you to discord.com, where you pick a server for the bot. Discord gives us a token that could identify who added the bot; we don't use or keep it. We store the server, the channels you choose, the events you turn on and a record of changes to these settings: which account and player made each change, when, and what changed. Any officer of the fleet sees that record. An invite link for a server admin works for 24 hours. The bot posts events of the fleet to the channels you pick, and the server's members see them like any message in that channel. The events name only players shown in the public rankings and league rosters. DISCONNECT deletes the server link, the invite link and the events still waiting; the settings and the record of changes stay with the fleet. The bot stays on the server until a server admin removes it in Discord.

Commands: anyone who adds the PSS2.org app to Discord can ask it about a player, an item price, a crew or a fleet, or play the daily Crew Puzzle. We process each request and don't store it, except /puzzle: it keeps your Discord user ID and the crew you name in each day's puzzle, so it remembers your game between commands (see the table below for how long). Share posts your result line to the channel; the line names no crew. The server log keeps only the name of the command and the time.

Server logs and backups

The site runs on a rented server, which holds the database, the logs and the local backups. The web server keeps standard logs (IP address, time, the address requested, referrer and browser) for up to 15 days for security and troubleshooting, then deletes them. Every night the database is copied on the server and to cloud storage; each copy is kept for up to 8 days.

How long we keep things

Expired data is removed by a nightly cleanup, so an expired code or sign-in can stay in the database for up to a day after it stops working; the times marked up to already include that day.

Deleting your account

Delete account in your account settings erases your email, password hash, settings, devices, saved plans, linked players, Discord connection, notification settings, price watches and notifications at once. What stays:

• layouts you published stay in the gallery without an owner. One signed with a linked player keeps the player's name as plain text, without the #number and the Verified mark, if the name uses only English letters and digits; otherwise it shows no name. The layout still records which player signed it, but no longer shows it as verified. Delete layouts first if you don't want them to stay; the edit link keeps working after the account is gone;
• a fleet bot you connected and its record of changes, which belong to the fleet: your account is removed from them, and the player who made a change stays named, as a public player of the rankings;
• the record of link requests, for up to 2 days;
• hearts and reports you left, which belong to the pss2g cookie, not to the account;
• backups and web server logs, until they expire.

Your rights

You can see and change your data in your account settings and delete it there. To get a copy, correct something else or ask a question, message me on Discord (kolembet).

Changes

When this page changes, the date at the top changes too.