Privacy Policy — Albion Market Data Client

Last Updated: July 11, 2026

This policy explains exactly what the Albion Market Data Client (the "app") — the Windows desktop application for the game Albion Online — collects, where it goes, and what it never touches. Because the app reads network data, we've written this to be precise rather than vague: wherever a claim can be checked, it matches what the app actually does. The app's backend is the website at albionmarket.gg (the "service"). For the rules that govern use of the app and service, see the Terms of Use.

In short

• What it does: it passively reads the game's own market-data network packets (Photon UDP) to keep community prices fresh, and — only if you sign in — records your own gameplay statistics to your dashboard.
• It changes nothing: it does not modify the game, inject packets, automate anything, or send anything back to Albion's servers.
• You're in control: run it anonymously (public market data only), or sign in and toggle off any category of personal data you don't want uploaded.
• Only game traffic: capture is filtered to Albion's packets only. It does not read your browsing, other apps, files, keystrokes, or screen.

1. What the app is & how capture works

While you play, Albion's servers continuously send your game the market data it needs (prices, buy/sell orders, history) as network packets that arrive at your PC. The app uses the standard third-party Npcap capture driver to read a copy of those packets as they arrive at your network adapter, filtered to the game's Photon UDP traffic. That is all it does: it reads data already on its way to you. It never connects to Albion's servers, never sends packets, and never modifies the game client.

2. Data we collect

2.1. Market data (public game-economy data)

• What: marketplace buy/sell orders, price histories, item market-value estimates and gold prices, as observed in the game's own traffic while you browse the in-game market.
• Contains no personal identity — it is game-economy data (item, price, quantity, location, server), not information about you.
• Where it goes: uploaded to our ingest backend at albionmarket.gg (protected by an optional proof-of-work handshake to deter abuse). This upload happens on the market pipeline independently of whether you are logged in, and is not tied to your identity.
• It is public: aggregated market prices are published publicly on albionmarket.gg so the whole community benefits from fresher prices. This is anonymous economy data, not personal data.

2.2. Account data (only if you sign in)

• What: your Discord user ID, username and avatar, and a Discord refresh token.
• Why: to link uploaded gameplay statistics to your dashboard and keep you signed in.
• How you log in: via Discord's device-authorization (OAuth) flow. The app never sees or handles your Discord password.
• How it's stored: locally on your PC in a SQLite database. The refresh token is encrypted at rest with Windows DPAPI (tied to your Windows user account), and is sent to the backend only as a Bearer token over HTTPS.

2.3. Gameplay data (only when signed in and the matching toggle is on)

Each category below is an independent toggle in the app. They default on, but nothing is uploaded unless you are signed in — and you can switch off any category individually:

• Trades — your own marketplace trades.
• Mails — marketplace mail (sold/bought notifications).
• Gathering — resources you gather.
• Combat / damage meter — combat and damage statistics, which can include the in-game names of members in your party session.
• Loot — items looted (your own, and loot observed from party members or nearby players).
• Party — party composition (member names).
• Specs — your character's Destiny Board (mastery/specialization levels).
• Awakened — awakened weapon rolls.

Uploaded alongside this data: your character name, server region (West / East / Europe), in-game location, and session timestamps, sent to authenticated /user/* endpoints and shown only on your own dashboard.

Please note: combat, loot and party data can include other players' in-game character names (party members, or nearby players you loot from). This is information already visible in-game, but we disclose it plainly: the app may transmit character names other than your own.

2.4. Technical data (sent with requests)

• What: the app version (X-Client-Version header), your user ID (X-User-Id header) when signed in, and the standard connection metadata any web server receives — your IP address, a timestamp, and a user-agent string.
• Update check: the app periodically sends its current version to /client/version to see whether a newer build exists. It does not auto-download or run anything — at most it opens a download link in your browser.
• Server logs: like any website, our server keeps standard request logs (including IP address) for a limited period for security and abuse-prevention purposes.

3. What we do NOT collect

• No other network traffic. Capture is filtered to the game's Photon UDP packets only. The app does not read, store or transmit your web browsing, your other applications, or any non-game traffic — even though the Npcap driver is technically capable of more.
• No passwords. Login is Discord OAuth; we never receive your Discord credentials.
• No keystrokes, no screen capture, no microphone, no clipboard, no file scanning.
• No payment or financial data is collected by the app.
• Nothing personal leaves your machine unless you've consented — that means signed in, with the relevant toggle on. The only exception is the anonymous public market data described in §2.1.

4. How data is stored & secured

• In transit: everything is sent over HTTPS/TLS with full certificate validation to albionmarket.gg. There is no disabled certificate checking and no plain-HTTP fallback anywhere in the app.
• On your PC: a local SQLite database and a config file live under your Windows user profile at %APPDATA%\AlbionMarketDataClient\ (the database at ...\data\client.db). They store your mails, trades, login (with the refresh token DPAPI-encrypted), local caches of item/mob names, and your settings.
• On our server: your account and gameplay data are held in a secure, access-controlled database, with access limited to the operator. Our servers are located in the United States; if you are in the EU/EEA, this means your personal data is transferred to and stored in the US.
• Auto-start: the app can optionally start with Windows (via a per-user registry Run key). This is optional and you can turn it off at any time.

5. Third parties

We do not sell your personal data. The app relies on a small number of third parties:

• Discord — identity provider for optional login (OAuth). See Discord's Privacy Policy.
• Npcap — the bundled third-party packet-capture driver (by the Nmap project). See the Npcap site.
• GitHub — release binaries are hosted and downloaded from GitHub, subject to GitHub's policies.
• Public game-data sources — the app downloads item and mob reference data (e.g. the public ao-bin-dumps dataset). These are downloads only; no user data is sent to them.

6. Your choices & rights

• Per-category toggles: in the app you can opt out of any gameplay-data category (§2.3) at any time.
• Don't sign in: if you never log in, no account or gameplay data is uploaded at all — only the anonymous public market data in §2.1.
• Delete your local data: uninstalling removes the app. To also remove everything it stored locally, delete the folder %APPDATA%\AlbionMarketDataClient\ (paste that path into the Windows Explorer address bar).
• Manage verifications: characters you verified can be managed or removed from your dashboard at https://albionmarket.gg/app/?view=dashboard.

GDPR. The service is operated from Czechia (an EU member state), so the General Data Protection Regulation applies. Your legal basis for gameplay-data collection is your consent (login plus each toggle), which you can withdraw at any time. You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and the right to lodge a complaint with your national supervisory authority. To exercise any of these rights — including requesting a copy or full deletion of your data — open a support ticket in the Albion Market Discord server, or email [email protected].

7. Data retention

• Account & gameplay data: retained while your account is active, and deleted when you delete your account or request erasure.
• Market data: retained indefinitely as part of the anonymous public price dataset (it contains no personal identity).
• Server logs (including IP): retained only for a limited period for security and abuse prevention, then discarded.

8. Data controller, age & changes

Data controller: Nick Konzen, Czechia (EU). For any privacy question or request, contact [email protected] or open a support ticket in the Albion Market Discord server.

Minimum age: the service is not directed at, and must not be used by, anyone under 16 (or the age required in your country to consent to the processing of personal data). We do not knowingly collect personal data from children below that age.

Website & cookies: this policy covers the desktop app. The app itself sets no web cookies. For how the albionmarket.gg website handles cookies and browsing data, see the website Privacy Policy.

Changes: we may update this policy from time to time. Significant changes will be announced in our Discord server, and the "Last Updated" date above will change. A short note for completeness: this tool reads only the game's own network data and does not modify the game client.

9. Contact

• Preferred: open a support ticket in the Albion Market Discord server.
• Email: [email protected]