Policy · Updated 30 September 2026
Privacy
Your portfolio stays on your computer. The separate subscription service stores the billing identity and evidence needed to verify access, reconcile payments and handle support. Payment collection is not open.
Website and local app
What stays on your computer
The public website distributes EVT and documents it. It has no EVE login, portfolio uploads, advertising trackers or third-party analytics scripts. Cloudflare hosts the website and processes traffic metadata for delivery and security; GitHub hosts the public release downloads and issue tracker.
EVT keeps your database, market cache, preferences, connected-character records and encrypted credentials locally. Enabled character connections talk directly to CCP; an enabled assistant talks to your chosen provider and sends your question and a page-specific routing prompt. Provider privacy terms apply to that connection. The subscription service receives no customer portfolio, data-character ESI tokens, assistant credentials, assistant questions or hardware fingerprint.
Central subscription records
What billing stores and why
- Verified billing character ID, an ownership digest and an opaque account ID, to bind access and enforce one trial per EVT billing account.
- Trial start, subscription expiry and account status, to determine access.
- Random device IDs, hashed device credentials and revocation status, to pair installations and issue signed licences.
- Payment reference, validity window and use status; matched journal ID, amount, verified transfer time and old/new expiry, to credit once and resolve payment disputes.
- Voucher hashes, issue and redemption deadlines, an operator label, the redeemed account ID and immutable redemption/revocation times, to grant promotional access once and investigate misuse. The service does not store plaintext voucher codes.
- Temporary login, browser session, pairing and rate-limit records, to secure account access.
- Bounded incident records and append-only support handling records, containing safe action codes, identifiers, private ticket references and times.
Customer billing sign-in requests no private wallet scopes. Only Cambrianor authorises the receiving wallet. Its refresh grant and temporary payment candidates are encrypted server-side; unrelated wallet rows are not persisted. Rejected subscription candidates retain only journal identifiers, safe rejection categories and observation times.
The billing website uses essential login/session and security cookies. They are not advertising cookies and do not track your market activity.
Storage and providers
A separate billing service
Billing runs at subscriptions.evevalkenberg.com on Cloudflare Workers with private D1 storage. Cashier credentials and signing secrets never enter desktop downloads. Application analytics and Worker invocation logging are disabled; Cloudflare still processes infrastructure metadata and operational metrics. This notice does not promise storage in one country.
Private recovery copies include D1 recovery history and restricted, encrypted operator snapshots. A separate operational watchdog stores safe health codes and delivery status and emails the operator through Cloudflare. It has no access to customer billing records or keys.
Provider information: Cloudflare privacy, GitHub privacy and CCP privacy. Your chosen assistant provider has its own privacy terms.
Retention and deletion
Local deletion and central records are separate
Use Settings to disconnect credentials or delete local EVT data. Uninstalling preserves the data directory for upgrades. Local deletion does not delete central billing records, reset your trial or refund a payment. Filesystem backups and copies may still contain earlier local data.
Temporary login, session, pairing and rate-limit records expire and are cleaned up. Account, trial, payment, device and support evidence has no automatic purge or fixed deletion timer in the current service: it remains until operator-reviewed retention or deletion. Retention is assessed against active entitlement, unresolved payment/support disputes, recovery needs and the minimum evidence needed to prevent repeated trials or duplicate payment credits. These records are not removed simply because a subscription expires.
You can request access, correction or deletion through private support. We verify the billing identity, review the request and explain any necessary retained records and their purpose. Payment and trial evidence is protected against routine alteration; no self-service central erasure is currently available. Recovery copies are reviewed separately and are not instantly erased by a request. This does not limit applicable privacy rights.
Contact and changes
Contact the EVT operator privately
Send private EVE mail to Cambrianor, character ID 1631557225, for billing privacy questions. Include your billing character and request type, not passwords, tokens or an unredacted database. See Support and Subscription terms for payment handling. Any material change to data collection or these operating rules will be dated and published here before it is introduced.