Your data is yours.

We collect the minimum needed to give you an account, sync your shop, and run the features you turn on. We keep it to ourselves, we secure it, and we let you take it back or delete it whenever you like. That really is the whole story — the sections below just spell it out.

Only what a feature actually needs:

• Your account. An email address, a display name, and a password (stored only as a securely hashed value — we never see or store the password itself). This is how you log in and how we can reach you about your account.
• Your language. The language you use on the site and in the desktop app, the one you pick in Settings, and the language your browser and the Windows installer reported when you signed up or installed. We keep only the language itself (for example “de”), never your browser’s raw settings, and use it to show the site and send your emails in your language.
• Your Path of Exile link. If you connect PoE — via the official “Sign in with Path of Exile” (OAuth) or a session token — we use it only to read your characters, stash, and trade listings on your behalf. On the desktop app this token is encrypted at rest on your own computer using your operating system’s keychain. A session token never leaves your computer. When you authorize from the desktop app, it opens your browser to sign in and hands the app a one-time authorization code — your password is never shared with the overlay.
• Discord sign-in (optional). If you choose “Continue with Discord,” Discord sends us your Discord user ID, username, and avatar so we can create or sign you into your account. With your permission we also receive your Discord email and use it only to confirm your account. You can always sign in with an email and password instead — Discord is never required.
• The game data you choose to save or sync. Things like items you price or sync from the desktop app, saved builds, watchlists and price alerts you set up, and the price history and net-worth snapshots that power your dashboard charts. You control whether any of this syncs at all.
• Product telemetry and crash reports. Unless you turn it off, the desktop app sends coarse, anonymous usage, performance and error events so we can find failures. Exactly what is sent, what never is, how to turn it off, and how long we keep it is listed in Desktop app telemetry & crash reports.
• Basic operational logs. Standard, short-lived technical records (like error and security logs) needed to keep the service running and safe. These aren’t used to profile you.

Your Path of Exile session stays on your PC. If you connect your Path of Exile session in the ePOE app, the session token (POESESSID) is stored only on your own computer, encrypted with your operating system’s keychain. It is never sent to or stored on ePOE’s servers. Every request the app makes to Path of Exile with it (price checks, shop and stash reads, undercut checks) goes straight from your computer to Path of Exile. Our servers only receive the results you choose to sync to your ePOE account, such as your shop listings and prices.

We don’t ask for anything we don’t need, and we don’t collect data in the background “just in case.”

Telemetry is on by default, and easy to turn off. The desktop app sends coarse, anonymous usage data so we can see what breaks and what’s slow. The first time you launch it, a one-time notice — “Thanks for helping us build a better ePOE!” — explains this and the Sharing Perks it unlocks, with links to exactly what is collected and to an in-app guide on turning telemetry and Sharing Perks off. To turn it off, at any time, use the Product Telemetry switch in Settings → Privacy. That stops telemetry and crash reports immediately and discards anything still queued on your PC — nothing more is sent.

What an event contains. Each event carries only these fields:

• event_id — a random id so an event is never counted twice
• client_id — an anonymous random UUID for this install
• session_id — a random UUID per app launch
• kind and name — what happened
• app_version and platform
• league — the trade league you price in
• occurred_at — when it happened
• props — a few coarse details, listed below

The kinds of event. Price checks (how long a check took, how many trade searches it needed, whether it ended with a price, and the item’s class and rarity — never the item itself), feature use (which tool you opened and what opened it), performance timings (start-up, attaching to the game, each price-check stage), errors (where in the app it failed and the first lines of the message and stack, redacted as below), and onboarding milestones sent once per install (first run, first price check, first time opening the dashboard, first custom hotkey, first sign-in).

The coarse details (props). Durations in milliseconds, probe counts, how a check ended, item class and rarity, the trigger (what started the check, such as a hotkey), the error source, per-stage timings (parse, deduce, fetch, render), whether the game window was attached, and your OS family and major version.

Never sent: your POESESSID or any other credential, your Path of Exile account or character names, item text, modifier values, file paths, or your IP address. Before anything leaves your PC, your home folder in any path is replaced with ~ (so your operating-system username never travels), anything shaped like a session token is replaced with [redacted], and error messages and stacks are cut to their first lines.

Never linked to your account. Telemetry is sent without cookies or any account login, so it stays anonymous even when you’re signed in to ePOE in the app. The only account-related detail is a yes / no flag for whether the app was signed in at the time — never which account, and no account id is stored with it.

Retention. Raw events are deleted after 90 days. Daily rollups — counts and timing percentiles per day, with no client ids — are kept indefinitely so we can see long-term trends.

Crash reports. Under the same switch, the app reports crashes and errors to Sentry, our error-tracking provider, so we can fix them. Every report is scrubbed on your PC before it’s sent: the same home-folder and token redaction as above, web addresses cut to the site and page (no query strings, and nothing after a /profile/ segment, where account names live), the app’s own log lines dropped entirely, no local-variable values, and no user details at all — crash reports aren’t linked to your ePOE account either. Turning Product Telemetry off in Settings → Privacy stops crash reports too — it’s one switch.

Keeping anonymous sharing on unlocks two perks in the desktop app’s Sharing Perks tab. They start only after you’ve acknowledged the first-launch notice, neither one links telemetry to you, and turning sharing off ends both.

• Beta updates. Whether you get beta builds is decided on your PC: the app simply asks our update server for the beta release feed instead of the stable one. Nothing identifying is sent to choose it.
• Giveaway tickets. The app creates a random, anonymous ticket on your PC. While sharing is on it checks that ticket in once a day, at a random time. We store the ticket only as a one-way hash, plus the calendar days it checked in — no times, no account, no telemetry client id, no IP address and no browser or device details. Tickets are never stored alongside telemetry, so a ticket can’t be matched to your usage data, and check-in requests aren’t recorded by our error tracker. A ticket’s data is deleted after 120 days without a check-in.
• Winning and claiming. A winning ticket is published on /giveaways and in the app; nobody — including us — knows whose it is until the winner claims. To claim, the app sends the ticket’s secret (proving it holds the winning ticket) with the contact you give us — a Discord name or email — and an optional note. That contact is the only personal data in the giveaway: it’s stored encrypted, used only to deliver the prize, and deleted automatically 90 days after you claim.
• Free entry. The free entry on /giveaways needs no app and no account — just Cloudflare’s “I’m human” check (see section 07). It creates a ticket for that draw and shows its secret to you once; we keep only the ticket’s one-way hash and the day it was made, never the secret. To hold free entries to one per person per draw per day, we keep a daily-salted hash of your network in a short-lived cache that expires at the end of that UTC day — your IP address itself is never stored.

• Sell, rent, or trade your personal information — to anyone, for any reason.
• Share your data with third parties for their own marketing or products.
• Put advertising, cross-site, or behavioral trackers on this site or in the app.
• Build advertising profiles, or fingerprint your device.
• Use your data for anything beyond running the features you asked for.

ePOE is designed so your machine does the work. Whether you’re pricing an item, planning a craft, following a leveling route, importing a build, or browsing the item database, most of it runs right on your computer. When the overlay needs live trade prices, it talks to Path of Exile’s service directly from your own connection — the same way your browser would. We store only what’s needed to power your account and the features you turn on. Beyond the coarse, anonymous telemetry described in section 03 (which you can turn off), nothing about your moment-to-moment activity leaves your machine unless you choose to sync it.

Running a service means trusting a small number of infrastructure providers. We keep this list short, we send them only the minimum required, and they’re contractually bound to use it only to provide that service to us — never to sell it or use it for their own purposes:

• Email delivery. Transactional emails (sign-in, account, price alerts you asked for) are sent through an email delivery provider. They handle the message so we can reach your inbox — nothing more.
• Push notifications. If you opt into browser notifications, delivery goes through your browser’s own push service. You can revoke this anytime in your browser or our settings.
• Bot protection. New account registrations and giveaway free entries run a Cloudflare Turnstile “I’m human” check. To run it, your IP address and basic browser signals are sent to Cloudflare, which returns only a pass/fail result. It is used solely to block automated abuse of those forms — never for advertising or tracking.
• Discord sign-in. If you choose to sign in with Discord, we exchange an authorization code with Discord to receive your Discord ID, username, and avatar, and — with your consent — your verified email. These are used only to create and sign you into your ePOE account. Signing in with Discord is always optional.
• Error tracking. When the site or our servers hit an error — or the desktop app crashes while Product Telemetry is on (see section 03) — a scrubbed error report goes to Sentry so we can fix it. On the site, a report can include a short replay of the page leading up to the error, with all text masked and images blocked.
• Hosting. The site and API run on infrastructure we operate. Your data stays within it.

These are service providers, not partners we “share” your data with. None of them get your data to keep or resell.

ePOE uses Grinding Gear Games’ official APIs to read your account’s data and to look up live trade prices, always acting on your behalf and within their rules. Your PoE session is used solely to fetch your own game data. ePOE is an independent, unofficial companion — it is not affiliated with, endorsed by, or sponsored by Grinding Gear Games.

We use essential cookies — the kind that keep you logged in and your session secure — and, only if you accept our cookie banner, Google Analytics 4 for aggregate, IP-anonymised usage statistics. Analytics runs under Google Consent Mode and is off by default: decline the banner (or browse with Global Privacy Control / Do Not Track enabled) and no analytics cookie is set. You can change or withdraw your choice any time via Cookie settings in the footer. There are no advertising cookies and no cross-site ad profiling; Google processes analytics data as our processor (see Google’s Privacy Policy). The desktop app’s separate product telemetry and crash reporting (on by default, anonymous) are covered in section 03; the Product Telemetry switch under Settings → Privacy controls both.

You’re always in charge of your data:

• Disconnect PoE at any time to revoke our access to your game data.
• Access or export the information tied to your account.
• Delete your account from Settings: it’s signed out everywhere at once and erased after 14 days (until then, the cancel link we email you keeps it). A giveaway claim contact you typed is kept until its own 90-day deletion.
• Turn features off. Anything that syncs data is optional and reversible in settings.

Depending on where you live, you may have additional legal rights (such as under GDPR or CCPA). We honor them for everyone, everywhere — reach out and we’ll take care of it.

Traffic is encrypted with HTTPS. Sensitive tokens are encrypted at rest. Your PoE session token exists only on your own computer, secured by your operating system’s keychain and never written to disk in plain text. Passwords are stored only as strong one-way hashes. We limit access on a need-to-know basis and keep only what we still need.

If we ever change how we handle your data, we’ll update this page and move the “last updated” date below. We’ll never quietly weaken these promises — and if a change is significant, we’ll do our best to tell you directly.

Questions, requests, or just want to check something? Email support@epoe.io or reach us through the in-app Support page. We read every message.