Privacy notice

ARNA Industries [ARNAI], an unincorporated group of EVE Online players based in the UK, run by its directors, is the data controller for this website. For anything about your data, including the requests below, email data@arnaindustries.org.

When you log in with EVE Online. EVE Online's login (run by CCP hf., now Fenris Creations, the makers of EVE) tells us your character's ID and name and an "owner hash" that changes if the character is sold to someone else. We never see your EVE account, email address or password. We store these with your corporation, your role on the site and when you last logged in, to check that you're in the corporation (or one of the few guests, such as our alliance's leader, whom the corporation lets in) and to run the members area. Each time you log in (including "Update my skills") we also read your character's skill levels, which EVE's login page lists, and keep only the levels, to show which corp fits you can fly; we don't keep the access token.

Your blueprints, if you choose. On your profile you can let us read your blueprints, through a separate EVE login that asks only for that. We read the list once and keep no access: each blueprint's type, research (ME/TE), runs and whether it's an original, but not where it is. Other members only see the ones you choose to show. You can delete them at any time ("Forget my blueprints").

What you do in the members area. Buyback appraisals you submit (the items, values and your note) and their review (the reviewer and their note), the corporation's LP wallet entries, wormhole connections you log or edit, blog posts, events, guides and corp fits you write, the awards and roles you're given or give, build orders you post or claim, ship replacement claims you make (the loss from its killmail, how your fit compares with the corp fits, your note) and their decision and payment (the officer, their note and the amount), the events you sign up for (and in which fleet role), each with your character's ID; whether you've turned on pipe or chain alerts; and the notifications we send you on the site.

The corporation's member list. Even if you never use this website, we read the names and IDs of everyone in ARNA Industries from EVE Online's official data service (ESI), using a character with director access, to show the members list to members. Members' profiles also show their public corporation history from ESI, and we keep the date each member joined (from that history) to give awards for time in service automatically.

The mining ledger. The same way, we read what each pilot mined at the corporation's own moon refineries (character name and ID, ore, amount and day), which EVE records for the corporation. Members can see it, and officers use it for the corp's mining tax.

The corporation's wallets. The same way, we read the corporation's wallet journal: each payment into or out of the corp's wallets (date, amount, type and balance), who paid or was paid (character or corporation ID), the pilot an entry comes from (for a tax on your bounties, say, EVE's wording names you), and any reason they typed, for example on a donation. Only the corporation's admins can see the entries, to keep the corp's accounts, including totals per pilot (who contributed most); members see only the month's total income on the dashboard's goal bar.

Public game data. Kills involving our corporation, and kills in systems we watch, come from zKillboard and ESI. They include the names of the characters, corporations and alliances involved, including players who aren't members, and from them we rank the most active pilots and groups in those systems for members. This is public in-game information.

Technical data. Our web host keeps standard server logs (IP address, browser, the page requested and when) for security and to keep the site running, and the site logs its own errors and background jobs (which can include a character ID). For cookies and what's kept in your browser, see Cookies.

We rely on legitimate interests: running a members-only website for our corporation, keeping its records (buyback, LP and service records, and its accounts), and sharing intel about the systems we fly in. We think this is what you'd expect from your corporation's website, and we keep what we hold to what's needed for it. Preference cookies are only used with your consent.

You don't have to give us anything to read the public pages. Without logging in with EVE Online you can't use the members area.

Whether you can use the members area is decided automatically, from whether your character is in the corporation or on its guest list, and some awards are given automatically for time in service. Neither has any legal or similar effect on you.

We don't sell your data or share it for marketing. Other members and the corporation's leadership can see the members area (images officers upload to posts and guides can be opened by anyone with their link). Services we use:

• Our web host, a UK hosting company: runs the website and keeps its server logs.
• Neon: hosts the database, in its London (UK) data centre. Neon is a US company, so its staff may access it from the US, under its data processing terms with the UK's transfer safeguards.
• CCP hf. (now Fenris Creations), in Iceland: runs EVE's login and ESI. We ask ESI about characters by their public ID, for example to check which corporation you're in. The UK treats Iceland as giving adequate protection.
• Discord (US): the site posts alerts to the corporation's Discord channels: kills near us (the victim's ship and name, from public kill data), wormhole connections (without who logged them) and new events to the corp channel, and ship replacement requests (with the pilot's name and the loss) to the officers' channel. Discord's own privacy policy applies there.
• Fuzzwork: we download trade hub market prices from it for the LP store and the industry calculator. We don't send it anything about you.
• zKillboard: we download public kill data from it, including the killmail of a loss you claim for ship replacement (we ask for it by the kill's number only). We don't send it anything about you; links to it take you to its own site.

Your browser also loads character portraits and ship pictures from EVE Online's image server (images.evetech.net), and blog cover images from the sites they're on, so those see your IP address. EVE Online's services have their own privacy policy.

• Your login record, skills, blueprints, notifications, event sign-ups and pipe and chain alert settings: while you're in the corporation (or on its guest list). Once you've left and haven't logged in for 12 months, they're deleted automatically.
• The corporation's records (buyback appraisals and reviews, LP wallet entries, awards and roles, blog posts and guides with the images uploaded for them, events, fits, build orders and ship replacement claims): kept as the corporation's history, with your character's ID. Once your login record is deleted, your name and the "by" links on them go too, and your build claims stay without your ID. Ask us if you want something removed.
• The mining ledger: 90 days, then deleted.
• The corporation's wallet journal: the amounts are kept as the corp's accounts; who paid or was paid, the pilot an entry comes from, and their reason, are removed after 12 months.
• The member list: refreshed from ESI; people who leave drop off it.
• Kill data for watched systems: 31 days. The homepage killboard: the latest 100 kills.
• Logged wormhole connections: deleted within 15 minutes of when the wormhole must have collapsed (at most 2 days).
• Database backups: our database host keeps a restore history for a limited number of days, after which deleted data is gone for good.
• Cookies: as listed on the cookies page.
• Server logs: archived by our web host each month and deleted at the end of the next month, so at most about two months. The site's own logs are overwritten as they fill up.

You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, or (where the law gives that right) to have it in a portable format. Email data@arnaindustries.org with your character's name; we may ask you to confirm you own it (for example with an EVE mail from that character). We'll reply within one month, and it's free.

Your right to object. Because we rely on legitimate interests, you can object at any time to how we use your data. Email data@arnaindustries.org, and we'll stop unless we have a strong reason to carry on that outweighs your interests.

You can withdraw your consent to preference cookies at any time on the cookies page.

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint (opens in a new tab) or 0303 123 1113.

The site only runs over HTTPS. Access to the members area is checked on every request, the director character's ESI refresh token is stored encrypted, and we never receive EVE passwords. If something went wrong that put your data at risk, we'd tell you, and the ICO where the law requires it.

If you see something in the members area that you think is illegal or harmful, or want to complain about how we handled a report, email data@arnaindustries.org or contact a director in game. We'll look at it and remove it if it breaks the law or our rules.

This website is for EVE Online players and isn't aimed at children.

We'll update this notice when what we hold or how we use it changes, and change the date at the top.