What the Warframe overlay reads, and what it never reads

In one sentence

The extension listens to what Warframe's servers already send to your PC, reads the log the game writes on your disk, and photographs the relic reward screen to read it on your machine. It writes nothing into the game, does not read its memory, simulates no keystroke and never plays in your place.

Your inventory

Overwolf provides a game events interface for Warframe (“GEP”). Our extension subscribes to it, and receives through it the inventory document Digital Extremes' servers send back to your game: at sign-in, when entering or leaving a relay or a town, and at about one mission end in two. It is passive listening: the extension cannot ask for the inventory, it sees it go by when the game receives it.

This document contains what your account owns (equipment, mods, relics, resources, blueprints, standing, finished quests, missions played) and your platinum balance. According to our measurements, it carries neither your email address, nor your password, nor your name, nor your messages.

The game log

Warframe writes a text log on your disk (EE.log). The extension reads it, without ever modifying it, and only keeps a few exactly recognised lines:

• your in-game name, on the sign-in line;
• the squad session identifier and its members' names, to recognise that a teammate also uses Tenno Crossroads, and keep your shared roadmap up to date while you play together;
• the era of the fissure you launch;
• the opening and closing of the relic selection screen and the relic reward screen, the relic you confirm and the reward that comes to you;
• during a trade between players: the opening and closing of the trade screen, the confirmation dialog the game writes (what you offer, the other player's in-game name, what you receive), your answer, and the game's verdict (“The trade was successful!”).

The other lines, including chat, are ignored: they are neither kept nor sent.

The relic reward screen

When the reward choice screen opens, and only then, the extension takes a screenshot to read the names on the cards, including your teammates'. The reading (character recognition) happens on your PC. Only the text read goes to our server, which matches it against the catalog and adds what you own and the price. The image is never sent. It stays in memory, and is only written in the extension's folder if the in-memory capture fails, always under the same name, rewritten on each screen. Reward reading can be turned off in the extension's settings.

The relic selection panel, however, takes no screenshot: it relies on the game log and your inventory.

While the relic selection panel is shown, the extension listens to a single key, Esc, to know when to close it. It does not record it and sends it nowhere. The mouse is not listened to.

Trades between players

No screenshot: when you accept a trade, the game itself writes in its log what you give, the other player's in-game name, what you receive, then whether the trade succeeded. The extension reads these lines and sends them to our server, only while you play, extension open. A trade made without it is never re-read afterwards in this log: it changes nothing in your history, your counted inventory or your warframe.market orders.

When the game writes that the trade succeeded and the item matches one of your warframe.market orders, the sale or purchase is written in your history without asking you; you can remove the row in one click. Otherwise, you are asked, with what the game wrote. What the trade changes in your inventory counts right away in your roadmap, until the game sends your inventory again: everything that comes in or goes out, warframe.market order or not, weapons included. What the app cannot attach (a riven, for example) is written “not counted”, never guessed.

After a confirmed sale or purchase, a price alert on that item pauses (you choose to resume or delete it), and your sell order is withdrawn from warframe.market if you have no copy left, if the account option is on (it is by default). What the app did is shown in game.

What goes to our server

Everything goes over HTTPS to the server of Tenno Crossroads, and only once your PC is linked to your account with a confirmation click:

On your disk, the extension keeps a copy of each inventory received, in its own folder. What the server keeps, and for how long, is in the privacy policy.

What it never does

• read or modify the game's memory, or inject itself into its process;
• query Digital Extremes' servers itself, or sign in to your Warframe account;
• contact a server other than ours, apart from Overwolf itself;
• simulate a key, a click or an in-game action, or automate anything;
• modify a game file;
• read, keep or send your chat;
• ask for your Warframe password.

What our server asks of others

From Digital Extremes

Only public publications, the same for everyone, never account data: the current world state (fissures, bounties, cycles), and the drop tables page, whose update date is checked every six hours and which is only downloaded when it has changed.

From warframe.market

Prices and orders, under a declared application name and within the three requests per second limit they set, shared by all our players. We do not copy their site. When you connect your warframe.market account, your orders are posted, edited or withdrawn on your behalf, on your action; and your SELL order for an item is withdrawn automatically when you have no copy left after a sale, if your account option is on (it is by default). A withdrawal is a request, and each one is announced to you.

From a community service

warframestat.us fills in what Digital Extremes does not publish in the world state (Nightwave titles, event texts). It never replaces a fact DE publishes.

A question?

If you see the extension doing something this page does not describe, it is a defect: tell us from the contact page. Same for a precise question, especially if you work at Digital Extremes or at Overwolf.