YOUR DATA

Privacy policy

WORKING VERSION · 15/09/2026

This document has not been reviewed by a lawyer yet. It describes what the application does today, and every piece of information we do not have yet is marked “to complete” rather than filled in at random. It will change before it is final, and the date above will change with it.

In short

We keep your account, your last 5 inventory readings, what you write in the application, and a few technical traces. Everything is detailed below, with a duration for each thing.
We neither sell nor rent any data. No third-party tracker: audience measurement runs on our own server, without cookies, and our fonts are hosted by us.
The application shows no advertising, anywhere, at any tier. Overwolf shows some in its own interface, outside our screens: that does not depend on us.
You can ask at any time for access to your data, its correction or its deletion.

Who is responsible

The data controller is the publisher of Tenno Crossroads : TO COMPLETE · publisher's name, TO COMPLETE · address.

For any question about your data: contact page, “My personal data” section.

What we keep

Here is everything our server keeps about you, why, on what legal basis, and for how long. What has no set duration yet is written as such.

Data	What for	Legal basis	Duration
Your account: email address, public name, password (hashed, never in clear), creation and last sign-in dates	Running your account, signing what you publish	Performance of the service	As long as the account exists
If you sign in with Google: your Google account identifier and the address it gave us (nothing else: no name, no photo, no contacts)	Open your account when you choose “Continue with Google”	Performance of the service	Until you unlink Google (account page) or the account is deleted
Your sign-ins: session token fingerprint, browser used, IP address	Keeping you signed in, spotting a sign-in that is not yours	Performance of the service, security (legitimate interest)	30 days at most, 7 days without activity, then erased
Your inventory readings: the complete document the game sends	Computing your roadmap, what you are missing, what you can sell	Performance of the service	Only the last 5: each new upload erases the oldest
Your Warframe account's fingerprint (computed from two values of the inventory, hashed), and linking refusals	A Warframe account serves only one account here	Legitimate interest: preventing tier circumvention	As long as the account exists
The linked PC: fingerprint of the Overwolf machine identifier, extension version, visit dates	Knowing which PC sends for which account	Performance of the service	No limit today; detached from your account when it is deleted
Your in-game name, read by the extension	Signing your posts with your in-game name rather than your public name	Consent (box on your account page)	Until withdrawn: unticking erases it. Without your agreement, it is not even kept
Your squad: fingerprint of the session identifier, your in-game name, your teammates' names	Recognising that a teammate also uses the application, proposing a shared roadmap	Legitimate interest, can be turned off from your account page	A single row, replaced at each change, ignored after 10 minutes; kept until the account is deleted
A squad shared roadmap: its objectives, the chosen order, and the objectives you removed from YOUR view	Keeping it up to date while you play together: it is recomputed from your roadmaps and inventories	Performance of the service	As long as a member is part of it; the last one leaving deletes it
Your roadmaps and your preferences	The service itself	Performance of the service	As long as the account exists
What you publish: builds, screenshots (re-encoded, without metadata), tips, comments, votes, “likes”, reports	Showing them to other players, moderating them	Performance of the service	As long as they are published or the account exists (see “Delete your account”)
warframe.market: the session the site gives us back (never your password), your warframe.market identifier and name, the orders you follow, the trades you declare, your alerts	Posting and following your orders, asking you “did you sell?”, notifying you of a price	Performance of the service	Session: until you sign out of warframe.market. The rest: as long as the account exists, or until you remove it
Your trades between players, read in the game log: what was traded, the game's verdict, the (hashed) fingerprint of your in-game name and the other player's	Recording the sale or purchase of one of your orders without asking you, recognising the other half of a trade between two accounts here	Performance of the service	30 days, then erased. The other player's in-game name, in clear, only remains on the line of your history it produced
What a successful trade changes in your inventory (items, weapons, platinum), until the game sends your inventory again	So your roadmap counts the trade right away, whether it concerns warframe.market or not	Performance of the service	Until the next inventory received, then 7 days, then erased
What the app did after a trade: the sale recorded, the price alert paused, the warframe.market order withdrawn on your behalf (or the failure of that withdrawal)	Telling you in game (HUD banner, market mini-card)	Performance of the service	7 days, then erased. What followed a sale also stays written on its history line
Messaging: your messages, the time they were read, the order the conversation is about	Delivering your messages, moderating them when they are reported	Performance of the service, security (legitimate interest)	30 days after opening, or 72 h after the order disappears; longer if the conversation is reported
Messaging filter refusals: the type of refusal and its date, never the text	Pausing an account that insists	Security (legitimate interest)	30 days
Copies made for a report, decisions and sanctions (including the fingerprint of the sanctioned Warframe account)	Judging a report, enforcing a sanction	Security (legitimate interest)	No limit today: duration to be set
Your purchases and your rights: orders, rights granted, subscription (with your Overwolf identifier)	Giving you what you paid for	Performance of the service, accounting obligations	As long as the account exists; legal accounting period to be specified
The security log: sensitive actions (account creation with the email address, sign-ins, warframe.market sign-in with the name, moderation readings…) and IP address	Finding out what happened in case of abuse or incident	Security (legitimate interest)	No limit today, and it is not erased with the account: duration to be set
The server's technical logs: each request, without IP address, tokens and identifiers masked	Diagnosing a failure	Legitimate interest	System log retention period: to be specified

Backups : a complete copy of the server is made every day and kept 14 days, on the same server. Deleted data can therefore survive there for up to 14 days.

Rate limits : to curb abuse, your IP address is counted in memory for the duration of the limit. It is never written to disk, and everything is forgotten when the server restarts.

What the extension reads on your PC, and what it sends, is detailed in What the application reads. The details of messaging (filter, reports, who reads what) are in its charter.

What stays on your PC

The extension writes in its folder (%LOCALAPPDATA%\warframe-cockpit\captures) :

a copy of each inventory received from the game. The extension deletes none of them today: you can empty this folder whenever you want, nothing is lost for the application;
a session timeline file, and a PC record (machine identifier, version);
your PC's upload permission, in clear: it is what lets the extension stay linked after an update. Unlinking the PC from your account page makes it unusable;
a screenshot of the relic reward screen, only when the in-memory capture fails, always under the same name, rewritten on each screen.

Who we share with

Our providers

netcup GmbH (Germany) hosts the server. Data centre country: TO COMPLETE · country.
Overwolf Ltd. (Israel, a country recognised by the European Commission as offering adequate protection) distributes the extension and gives it access to game events. To check a subscription, we pass it the Overwolf session token the extension relays to us, and we keep your Overwolf user identifier. Our screens show no advertising; what Overwolf shows in ITS own interface falls under its privacy policy ↗.
Google, only if you choose “Continue with Google”: you sign in at Google, which confirms your identity and email address to us. We receive neither your Google password nor access to your Google data, and Google learns nothing of what you do here.
Payment, when the checkout opens, will go through Overwolf (operated by Tebex). We will see no card data.
Discord : when content enters moderation, a message goes to the moderators' private channel. It contains the author's public name, the build title or the tip text (truncated), or the reason for a report. Never your email address, never the text of a private message. Safeguards for the transfer to the United States: TO COMPLETE · to be specified.

warframe.market, only if you connect it

Your warframe.market address and password are sent to them once, for the sign-in; we do not keep the password. Then, we post, edit or withdraw your orders on your behalf, on your action, with one exception you control: after a confirmed sale, or when your inventory no longer counts any copy, your SELL order for that item is withdrawn automatically (option “Automatically withdraw my sell order…”, on by default, in your account, warframe.market card). Never a buy order, never on an unknown stock, and each withdrawal is announced to you. What you publish there is public on their site and falls under their rules.

What other players see

Your public name and what you publish.
Your in-game name next to your posts, only if you chose it.
Your squad teammates who use the application see your in-game name, as the game already shows it to them. Can be turned off (“squad sharing”, on by default). In a shared roadmap, and only while you play together, they also see which parts of its objectives you already have and the time of your last inventory: nothing else from your inventory, and nothing more once you split up.
On the market, the “uses Tenno Crossroads” mention next to your warframe.market name (on by default, can be turned off), and your in-game presence only if you turned it on (off by default).
In messaging, your warframe.market name. Never your email address.

Cookies and storage

We set three cookies, all necessary for operation, plus two for the duration of a Google sign-in: they serve neither to track you nor for advertising, and therefore do not need your consent.

Cookie	Role	Duration
`wf_session`	Keeping you signed in (unreadable by the page's scripts)	30 days
`wf_csrf`	Preventing another site from acting on your behalf	30 days
`wf_device`	Recognising the linked PC, for setup	1 year
`wf_oauth`	Check that a Google sign-in comes back to the browser that started it	10 minutes
`wf_oauth_pending`	Keep your Google account while you choose your username	15 minutes

The browser also keeps a few settings, never sent to anyone: the overlay opacity, the open HUD tab, the state of collapsed panes, and, for a visitor without an account, their roadmaps for the current tab (erased when it closes). The extension keeps in its own storage the server address, its upload permission and its relic reading settings.

To know which pages are useful, we count site visits with Umami, installed on our own server: nothing goes to a third party. No cookie, no identifier kept in your browser; we see the page viewed, the page you came from, your country, region and city, your language, and your device and browser type. Your IP address is not stored: it is only used to recognise the same visit within a day. If your browser asks not to be tracked ("Do Not Track"), nothing is counted. The in-game overlay is never measured.

Security

Everything goes over HTTPS.
Passwords are hashed (scrypt), session and access tokens are only kept as fingerprints.
Screenshots you send are fully decoded then re-encoded: their metadata (GPS position, device…) disappears.
The warframe.market session is kept in a file readable by the server alone.

Your rights

You can request access to your data, its correction, its deletion, its export, the restriction of its use, object to processing based on our legitimate interest, and withdraw consent. In France, you can also leave instructions on what happens to your data after your death.

Today, these requests are made in writing from the contact page, “My personal data” section, and we answer within one month. What you can already do yourself:

from your account page: choose whether your in-game name signs your posts, turn off squad sharing and market mentions, unlink a PC, download everything messaging holds about you;
remove your alerts, your followed orders and your roadmaps' objectives.

If you believe your rights are not respected, you can contact your country's data protection authority (in France, the CNIL).

Delete your account

Deletion is requested in writing (see above) and a human does it: the account page button is not wired up yet. It erases your account, your preferences, your roadmaps, your inventory readings, your warframe.market session and identity, your builds, your votes and your “likes”, and releases your Warframe account.

What stays, and why:

your comments, your tips and your messages in others' conversations stay displayed under “account deleted” (until their normal erasure for messages);
reports, decisions and sanctions; a sanction stays attached to the Warframe account's fingerprint, so it is not lifted by a new account;
the security log, which today is neither purged nor erased with the account;
the files of the screenshots you sent stay today on the server's disk: we erase them on request;
backups, for 14 days at most.

A deleted account number is never reassigned to anyone else.

Minors

Minimum age and rules for minors: TO COMPLETE · to be set.

Changes

This policy will change with the application. A significant change will be announced in the application before it applies. The terms of use govern the rest.