Your data is yours.

We collect the minimum needed to give you an account, sync your shop, and run the features you turn on. We keep it to ourselves, we secure it, and we let you take it back or delete it whenever you like. That really is the whole story — the sections below just spell it out.

Only what a feature actually needs:

• Your account. An email address, a display name, and a password (stored only as a securely hashed value — we never see or store the password itself). This is how you log in and how we can reach you about your account.
• Your Path of Exile link. If you connect PoE — via the official “Sign in with Path of Exile” (OAuth) or a session token — we use it only to read yourcharacters, stash, and trade listings on your behalf. On the desktop app this token is encrypted at rest on your own computer using your operating system’s keychain.
• The game data you choose to save or sync. Things like items you price or sync from the desktop app, saved builds, watchlists and price alerts you set up, and the price history and net-worth snapshots that power your dashboard charts. You control whether any of this syncs at all.
• Basic operational logs. Standard, short-lived technical records (like error and security logs) needed to keep the service running and safe. These aren’t used to profile you.

We don’t ask for anything we don’t need, and we don’t collect data in the background “just in case.”

• Sell, rent, or trade your personal information — to anyone, for any reason.
• Share your data with third parties for their own marketing or products.
• Put advertising, analytics, or behavioral trackers on this site or in the app.
• Build advertising profiles, or fingerprint your device.
• Use your data for anything beyond running the features you asked for.

ePoe is designed so your machine does the work. Whether you’re pricing an item, planning a craft, following a leveling route, importing a build, or browsing the item database, most of it runs right on your computer. When the overlay needs live trade prices, it talks to Path of Exile’s service directly from your own connection— the same way your browser would. We store only what’s needed to power your account and the features you turn on, and nothing about your moment-to-moment activity leaves your machine unless you choose to sync it.

Running a service means trusting a small number of infrastructure providers. We keep this list short, we send them only the minimum required, and they’re contractually bound to use it only to provide that service to us — never to sell it or use it for their own purposes:

• Email delivery. Transactional emails (sign-in, account, price alerts you asked for) are sent through an email delivery provider. They handle the message so we can reach your inbox — nothing more.
• Push notifications. If you opt into browser notifications, delivery goes through your browser’s own push service. You can revoke this anytime in your browser or our settings.
• Hosting. The site and API run on infrastructure we operate. Your data stays within it.

These are service providers, not partners we “share” your data with. None of them get your data to keep or resell.

ePoe uses Grinding Gear Games’ official APIs to read your account’s data and to look up live trade prices, always acting on your behalf and within their rules. Your PoE session is used solely to fetch your own game data. ePoe is an independent, unofficial companion — it is not affiliated with, endorsed by, or sponsored by Grinding Gear Games.

We use essential cookies only — the kind that keep you logged in and your session secure. There are no advertising cookies, no analytics cookies, and no cross-site tracking. Because we don’t track you, there’s nothing to “opt out” of.

You’re always in charge of your data:

• Disconnect PoE at any time to revoke our access to your game data.
• Access or export the information tied to your account.
• Delete your accountand the personal data associated with it — just ask and it’s done.
• Turn features off. Anything that syncs data is optional and reversible in settings.

Depending on where you live, you may have additional legal rights (such as under GDPR or CCPA). We honor them for everyone, everywhere — reach out and we’ll take care of it.

Traffic is encrypted with HTTPS. Sensitive tokens — like your PoE session — are encrypted at rest, and on the desktop app they’re secured by your operating system’s keychain and never written to disk in plain text. Passwords are stored only as strong one-way hashes. We limit access on a need-to-know basis and keep only what we still need.

If we ever change how we handle your data, we’ll update this page and move the “last updated” date below. We’ll never quietly weaken these promises — and if a change is significant, we’ll do our best to tell you directly.

Questions, requests, or just want to check something? Email support@epoe.io or reach us through the in-app Support page. We read every message.