Privacy policy

1. Who we are

Overwatch ("the Service") is operated by Vektus ("we", "us"). This policy explains what information the Service handles and the choices you have. It applies to overwatch.vektus.io and, when they ship, the Overwatch application and Sentinel companion.

2. Public game data

The intelligence Overwatch displays is derived from public EVE Online data: killmails published via zKillboard and CCP's official ESI API, including character, corporation, alliance, ship, and solar-system records. This data concerns in-game characters, is public at its source, and exists independently of Overwatch — removing it from our copy would not remove it from the public record. We do not augment it with out-of-game identity information about the players behind characters.

3. Account data we collect

When you create an account, we process:

• Login identity — your email address and authentication credentials, handled by our identity provider (Auth0). We never see or store your password.
• Linked EVE characters— when you authenticate a character through CCP's single sign-on (ESI SSO), we store the character identity and the read-only access tokens you granted. Scopes are shown on CCP's consent screen and can be revoked by you at any time at CCP's third-party application management page.
• Service settings — preferences, watchlists, and similar configuration you create inside the Service.

4. Technical data

Our infrastructure provider (Cloudflare) processes standard request metadata — IP address, user agent, request path — to serve, secure, and rate-limit the Service. We use aggregate analytics to understand usage; we do not build advertising profiles and we do not sell or share personal information for advertising.

5. The Sentinel companion

When it ships, Sentinel will read EVE chat log files that the game client writes to your own computer, locally, to power its notifications. Log contents are processed to identify pilots entering your current system; Sentinel sends the Service only what is needed to look up threat intelligence (pilot names/identifiers and your current system), not your conversations. Sentinel never modifies the game client and never sends input to the game.

6. Retention and deletion

Account data is retained while your account exists. Delete your account and we delete your login identity, linked characters, tokens, and settings within 30 days, except where a legal obligation requires longer retention. Public game data is not deleted, because it is public and not yours or ours.

7. Third parties we rely on

Cloudflare (hosting, security), Auth0 (authentication), and CCP hf. (ESI API, under CCP's own terms). Each processes data only to provide their function. We don't use advertising networks or data brokers.

8. Contact & changes

Questions or deletion requests: contact Vektus via the address published at vektus.io. If this policy changes materially, we'll note it here with a new "last updated" date.