Privacy policy

The short version

Tarkov.space has no advertising, no analytics and no third-party trackers. Nothing about you is sold or shared for marketing.

What is stored is what the site needs to keep your progress and let you sign back in.

What is stored about you

When you create an account:

• Your email address, which is how you sign in.
• A display name of your choosing.
• Your password, kept only as a scrypt hash — the original is never written down and cannot be recovered from what is stored.
• The interface language you were using, so the welcome email matches it.
• The date the account was created.

While you use the site:

• Which quests you marked completed or in progress, and the level of each Hideout station.
• Which tabs you left open, so the app looks the same on your next device.
• Optionally, your in-game nickname, faction and PMC level, if you fill them in.
• A session token, stored as a hash, so the site remembers you are signed in.

When you use the contact form:

• The name, email, subject and message you typed.
• Your IP address and browser identification, kept to make abuse of the form traceable.

Cookies

Two, both strictly functional:

• tb_session — the signed-in session. Readable only by the server, never by scripts in the page. It expires after 30 days.
• tb_lang — the language you picked, so the site opens in it next time.

There are no advertising or analytics cookies, so there is no consent banner to click through.

What other people can see

Another player who knows your account email or your in-game nickname can compare their progress with yours. What they see is your name, and the totals: completed quests, XP, Kappa progress, Hideout levels and performance per trader.

They never see your email, your password or your open tabs.

You can switch this off entirely in the profile menu, under "Let others compare with me". With it off, nobody finds you by either email or nickname.

Third parties

The site talks to few outside services, and it is worth knowing which:

• Item, map and ammunition images load from Fandom's image servers. Your browser contacts them directly, which means Fandom can see your IP address and which images you loaded.
• Emails — welcome, password reset — are sent through an SMTP provider, which handles your address to deliver them.
• The donation page is FanTip. You only reach it if you click the donate button, and Tarkov.space receives nothing about you from it.

There is no Google Analytics, no Facebook pixel and no advertising network.

How long it is kept

Account and progress data stay while the account exists. Sessions expire on their own after 30 days. Password reset links die within the hour.

Contact messages are kept so replies remain possible and so repeated abuse can be recognised.

Your data, your call

You can, at any time:

• Export everything you tracked, as a JSON file, from the profile menu.
• Change your name, email and password on the account settings screen.
• Clear all your progress with the reset option.
• Ask for your account to be deleted through the contact form — the account, its progress and its sessions are removed for good.

Security

Passwords are hashed with scrypt and a per-account salt. Session tokens are random and stored hashed, so a copy of the database does not hand anyone a working session.

The site runs over HTTPS. No system is perfect: use a password you do not reuse elsewhere.

Contact

Questions about your data, or a deletion request, go through the contact form on the homepage.