Privacy policy

1. Scope and principles

The TarkovBox maintainer handles information within the site and privacy inquiries. We use information lawfully, transparently and only as necessary to provide features, respond to requests or meet legal duties. Reading public resources does not require unrelated personal information.

This policy does not cover external websites, QQ groups, WeChat mini programs or payment platforms you choose to use. They may independently collect information under their own privacy notices.

2. Browsing, search and access records

Search keywords are sent to the site search API to match resources. Recently visited entry IDs may be sent to retrieve their names. The full search page includes the keyword in its q parameter, which may remain in browser history, shared links and access logs. Do not enter passwords or other sensitive information in searches or URLs.

Loading pages requests resources from the server providing the site. Requests carry connection information such as IP address, requested path, time and browser headers. Actual logging depends on deployment; such information should only be used as necessary for access, troubleshooting, security and legal duties. Current pages include no advertising trackers, profiling or third-party analytics scripts.

3. Browser storage

Theme preference is stored in this browser under tarkovbox-next-theme. Search recent visits store up to eight result IDs under tarkovbox-search-recent-v1, not a complete search-input history, and do not synchronize across devices. You can clear recent visits in the search interface.

The daily announcement dismissal stores a local date under tarkovbox-announcement-dismissed-day. It hides the announcement for that day and no longer hides it the next day, although the stored value may remain until overwritten or cleared. Theme and recent-visit records also remain until replaced, manually removed or cleared by the browser.

An HttpOnly session cookie maintains sign-in, and a CSRF token protects account actions. Signing out revokes the session. Browser settings can clear or restrict cookies and local storage. Collector progress, task plans, owned materials and saved recipes currently stay on this device and are not automatically synchronized to an account. Clearing site data may erase them. Public resources remain accessible. Language is determined by the URL; advertising cookies are not used.

4. Authentication and feedback input

Registration, sign-in, recovery and verification requests send the necessary email, display name, password or code to the site account API. The server stores account details and password hashes, not plaintext passwords. Codes are stored as hashes with expiry and attempt limits. The configured mail service sends verification messages to the supplied address. Passwords and codes are not written to persistent browser storage, URLs or application logs. Leaving the form clears its input state.

Feedback is sent only when you submit. We store its type, message, optional page link and contact details, interface language, receipt ID and submission time to investigate and address your feedback. Contact details are optional and not displayed publicly. Unsubmitted input remains on the current page without a saved browser draft. Type and source page may appear in URL parameters.

The feedback endpoint temporarily uses the connection IP for a ten-minute rate-limit window without storing it in feedback records. Receipts identify submissions and prevent duplicates; no public feedback lookup is provided. Account requests also use rate limits and code verification. AI task planning sends the selected game tasks and source objectives to DeepSeek to arrange their order; it does not send account passwords or private local notes.

5. Contact, corrections and cooperation

When you email or message the maintainer, we receive the email address or nickname, message, links and any attachments or payment-verification information you choose to send. We use this to reply, verify issues or address collaboration and payment matters, not for unrelated marketing.

Provide only necessary information and redact accounts, addresses, payment details and other people’s private information from screenshots. The email or community provider handles transmission under its own rules. Receiving feedback does not give us automatic permission to publish your identity, contact details or original message.

6. External platforms and device features

QQ, WeChat mini programs, WeChat Pay, Alipay and external websites are run by their respective providers. QR codes here are static images: viewing them does not submit a payment order. Scanning, paying or joining a group may show a recipient your nickname, transaction identifier, amount or message, depending on the platform and your actions. The site has no payment callback or automatic transaction synchronization API.

Copy actions write the specified content only when you click; the site does not proactively read your clipboard. Native sharing is completed by the device app you choose. Unsupported sharing may fall back to copying a link; cancelling sharing does not automatically copy. Site pages do not request camera, microphone, contacts or location permissions.

7. Disclosure and cross-border handling

We do not sell personal information or use feedback contact details for targeted advertising. Publicly identifying contributors or supporters requires separate authorization. Information required by an authorized public body will be provided only within the necessary lawful scope.

Before engaging a processor or providing information to another entity, we will define purposes, scope, protections and applicable notice and consent requirements. The current frontend does not configure active overseas transmission of form data. External services you choose may use different hosting and processing arrangements; this does not mean all third-party information is stored in one region.

8. Retention and security

Browser retention is described under Browser storage. Unsubmitted input stays on the current page; submitted feedback is stored on the server for the shortest period needed for communication, dispute handling or legal obligations, then deleted or anonymized when no longer required. You may contact us using this page and your receipt ID to request access or deletion.

We should restrict access and use and apply safeguards appropriate to the information’s risk. No network service can guarantee absolute security. If information is leaked, altered or lost, we will take remedial action and meet applicable notification and reporting obligations.

9. Your choices and rights

You can clear recent search visits, remove browser site data, stop entering information or close a demonstration form. For personal information we actually hold, email us to request access, a copy, correction, completion, deletion, restriction or withdrawal of consent-based processing. Withdrawal does not invalidate earlier lawful processing.

Describe the information, time period and requested action. We will verify your connection to the information only as necessary and respond promptly. If we cannot comply or must legally retain information, we will explain why and the available remedies. We do not require unrelated identity evidence. You may also complain to a competent authority or seek judicial relief.

Accounts are not currently available, so there is no online account-deletion feature. It will be explained when accounts become available. Deleting browser data does not delete messages or information already sent to email, community or payment platforms; contact the relevant holder separately.

10. Children and minors

The site is intended for players who can comply with game and platform age requirements. It is not directed at children under fourteen and does not actively request their personal information. Minors should browse with guardian guidance and should not send personal details or make support payments without guardian permission.

Guardians who believe a child’s information has been supplied to us can email us. We will investigate and delete it or take other appropriate protective measures. Any necessary lawful handling of information about children under fourteen requires prior guardian consent and specific protective rules.

11. Policy updates

We will update this policy and its date when features or processing change, and clearly notify users of significant changes. Consent or separate consent will be requested where legally required; continued browsing is not unlimited authorization.

You can access this policy from ordinary-page footers or authentication pages at any time. Contact the maintainer at the email below with questions about the policy or actual information handling.

12. Contact us

TarkovBox is independently maintained by its site maintainer. For questions about these terms, privacy or content rights, email us with the relevant page, issue and requested outcome. Do not send passwords, verification codes or unredacted payment records. Any identity verification will be limited to information necessary for your request.