FAQ
Frequently asked questions
Login and permissions
How does the login work?
Through EVE Online (EVE SSO). You land on CCP's login page, sign in there, choose the character and confirm the permissions. EveCrew only receives an access token for this character from CCP, never your password.
Which permissions does EveCrew ask for?
Only read permissions, and only those a feature really needs:
publicData: Public character data (name, character ID), for the loginesi-skills.read_skills.v1: Trained skills, skill points and attributes: for the ship matrix, roles and training timesesi-skills.read_skillqueue.v1: Skill queue: current training and a warning when the queue is empty or pausedesi-clones.read_clones.v1: Jump clones with location and implants, time of the last clone jump: for the career pageesi-clones.read_implants.v1: Implants of the active clone: for attributes and training timesesi-planets.manage_planets.v1: PI colonies with their layout (read only): for the PI overview, logistics and extractor warnings
If a permission is missing, the matching section simply stays empty.
Can I link several characters?
Yes. Logged in, you add further characters on the crew overview ("Add more characters") by signing in with them at EVE Online. They all end up in your account, even from different EVE accounts.
Can I register yet?
With an invite, yes. New pilots need an invite code or link, which you get from us in game. Open the link or enter the code on the login page, then log in with your main character; that creates your own, sealed-off account. Further characters are added afterwards without a code, and if you already have an account, just log in.
What happens when I sell a character?
CCP assigns a new owner hash when a character changes owner. That is how EveCrew recognises the sale: the new owner does not get into your account with the character, and if they link it to their own, the old data is deleted first.
Data
Which data does EveCrew store?
- Character ID, name, the granted permissions and CCP's owner hash
- Access and refresh token, encrypted
- The data from the permissions above: skills, queue, attributes, implants, clones, PI colonies
- Time and errors of the last sync
Details are in the privacy policy.
How current is the data?
EveCrew queries the ESI every 15 minutes, but only when CCP provides new data. CCP itself updates some endpoints less often; then you see CCP's state.
Where is the data stored?
On our own server (Kubernetes/k3s) in Germany. There are no analytics tools, no ads and no fonts or scripts from other servers. Portraits in the app are loaded by your browser from CCP's image server.
Deletion
How do I remove a character?
On the crew overview, click "Remove" on the character. EveCrew revokes the token at CCP and deletes the character with all its data.
How do I delete my account?
At the very bottom of the crew overview under "Delete my data": type delete and confirm. EveCrew revokes all tokens at CCP and deletes your account, all characters, all synced data and your sessions. This cannot be undone.
Can I also revoke EveCrew's access at CCP?
Yes, at any time on your EVE account page under "Connected applications". Then EveCrew cannot fetch anything any more and the character shows "Login expired". You delete the data already stored as described above. If a token stays invalid for more than 90 days, EveCrew deletes the character automatically; an account without a login for 12 months is deleted as well.
Payment
How do I pay?
In ISK, with "Give Money" to the character Caleb Jere. The price depends on your linked characters: 100M ISK a month for the main character plus 25M ISK per further character, at most 10 characters charged; a quarter costs 10 % less than three months. Pay with a character that is linked to your account. Everything else is on the Pricing page.
When is my access unlocked?
By hand for now: automatic billing is in the works, until then we check incoming payments ourselves and unlock access. This can take a while.
What do I see without paying?
In demo mode you see the app with all its pages, the results are hidden. Demo mode starts together with automatic billing.
Do I have to cancel?
No. There is no subscription, nothing renews on its own. If you do not pay again, access ends with the period you paid for.
I paid from the wrong character or the wrong amount.
Write to andreas.mautz@koeln.de with the character name, amount and time. We will then match the payment by hand.
Does EveCrew cost real money?
No, never. Payment is only in ISK inside the game.
Privacy and security
Who can see my character data?
Only you. Other EveCrew users never see anything of yours: every query is bound to the account you are signed in with and returns nothing for anyone else, even if they guess your character ID.
The admin sees only what is needed for access and billing: your account name, the name and ID of your characters and how many are linked, paid until, your last login and your payments. No skills, no queue, no clones, no locations, no implants, no PI colonies, no tokens.
What can the admin see?
In the app only who uses EveCrew and whether they paid: name of the main character, names and IDs of the linked characters, paid until, last login, status paid/demo and the booked payments (amount, date, paying character). The admin needs the names to match an ISK payment to the right account. Every booking by the admin is logged.
What can the admin not see?
No skills, no queue, no clones, no locations, no implants, no colonies, no tokens. The admin cannot log in as you and cannot export your data.
The admin area has its own account with email address, password and authenticator app. Nobody gets in with an EVE login, and your account still has neither an email address nor a password.
Can the operator see my data anyway?
Honestly: like with any web service, whoever runs the server technically has access to its database. EveCrew itself has no function to look at other users' data, and the admin area shows none. Access to the server is limited to the operator, and the access and refresh tokens are encrypted with the app key.
The operator uses that access only for operation, backups and troubleshooting. Your data is deleted on request, and automatically after a long time of inactivity (a token invalid for more than 90 days, no login for 12 months).
How is that ensured technically?
- Every table with character data can only be read through a filter on the signed-in account. If something is missing, the result is empty, never someone else's data.
- On every change, automated tests open every page of the app and of the admin area with two test accounts trying to look at each other, guessed character IDs included, and check every table that refers to a user or a character. A change that breaks this is stopped by the build pipeline and does not go live.
- Tokens are stored encrypted, sessions as well. EveCrew asks CCP for read permissions only.
- No tracking, no ads, no third-party scripts.
How do I report a security hole?
Privately, please: write to andreas.mautz@koeln.de and not in a public issue or in chat. Describe what you found and how to reproduce it. We will answer and fix it before it is made public.
CCP
Is EveCrew part of CCP?
No. EveCrew is an independent fan project and uses the official interfaces for third-party developers (EVE SSO and ESI). EveCrew is not affiliated with CCP hf.