Under the Hood

Privacy & Your Data

This page is the plain-language version. The Privacy Policy and Terms are the binding documents, and both are linked from the footer of every page.

Nothing is sent before you agree

The first time the add-on loads it shows a consent screen. Until you accept it, transmission is blocked outright, not merely discouraged. That is a requirement of KSP’s add-on rules and it is implemented as a hard gate rather than a preference.

When the policy changes, the server publishes a new version number. The add-on compares it against what you accepted and, if yours is older, blocks transmission and asks again before sending anything further.

What is stored

Your Discord ID

identity

The account everything else hangs off. No password is stored, because none is ever asked for.
Your Discord profile

seen by other players

Your display name, profile picture, level and Boundless username, stored so the add-on can draw you in the in-game player lists other players pick from (sending a craft, offering a contract, issuing a rescue) and beside the listings and auctions you take part in. The name and picture are the same public profile the community server already shows; the username is the handle that identifies you across every server, and only appears if you claimed one. Your Discord ID is not displayed.
Gameplay progress

the point of the thing

XP, balance, level, contracts, your corporation, marketplace listings and purchases.
A session token

on your machine

Signed by the server and stored in the add-on's folder. The server keeps a version number to invalidate it against, not the token itself.
A random device id

not your hardware

Generated once per install and bound to your account, so a copied session token from another machine is blocked. It is a random identifier, not a MAC address, and it says nothing about your computer.
What you submit

content

Screenshots, craft files, vessel telemetry, and the mod and part lists a craft needs. All of it is what a contract, a listing or a submission consists of.

What is not stored

Your MAC address is not collected at all; the add-on never reads it, or any other hardware identifier. Your IP address and your KSP.log are not collected as a matter of course either, and neither is part of the device binding. They are gathered in exactly one situation: a moderation report that you file yourself, about a device you did not recognise, where they exist for the moderators looking into it.

A bug report is the same shape of trade. Filing one from the Tools panel offers to attach your KSP.log, because it is the one thing that makes a KSP bug diagnosable, and it is your decision each time. The log is trimmed on your machine before it is uploaded rather than sent whole.

Where AI comes into it

Screenshots you post for analysis, and mission text for classification, may be processed by Google’s Gemini in order to provide those features. That is the whole extent of it. See AI Integration for exactly which calls those are.

Your three controls

Pause sharing

reversible, immediate

One switch in the settings panel. While it is off the add-on transmits nothing and runs inert until you switch it back on. Nothing is deleted.
Log out everywhere

reversible, immediate

Invalidates every session token issued to your account, including on installs you no longer have access to. Every device drops to its link screen on its next request. Your data is untouched.
Delete everything

permanent

Removes your record, your sessions, your device bindings and any outstanding link codes or challenges. What is left behind is a tombstone carrying only a version number, so that already-issued tokens cannot become valid again.

Deletion is a deletion

It takes your balance, your XP and your progress with it. There is no undo and no archive to restore from. If you want to stop the add-on sending anything without losing your account, pause sharing instead.

Suspensions, and what they are not

An account can be suspended from the API for a period, which blocks the KSP add-on and this website. It is deliberately not a Discord ban and not a wipe: your balance, XP, contracts and listings are untouched and waiting for you. There is no permanent option, because a suspension that never ends is a ban wearing a disguise.

While suspended, the add-on shows a notice with the reason, a live countdown, a check again button and the reassurance that nothing was deleted. Sessions are deliberately not revoked, so that every request comes back carrying the explanation rather than dropping you to a link screen whose only offer would be to link again.

Two things keep working throughout: checking whether the suspension has lifted, and logging out everywhere. The second is your own privacy control, and a punishment must not take it away.