Privacy

In short

• There is no registration. The site does not ask for a name, an email or a password and keeps no profile of a reader.
• The site has two addresses with the same content: exilebook.ru in Russian and exilebook.online in English. The address decides the language. Both run on one server, so everything below applies to both.
• No ads, no advertising or analytics cookies. There is one cookie with a setting: the list view in Bases, and only if you changed it.
• Pages load no third-party scripts or external fonts: pages, fonts and images come from our server.
• Everything below is kept on our server at the provider cloud.ru in Russia. Some logs may go to the logging service of the same cloud.ru. The site passes readers' data to no other service and out of the country.

The request log

The server sees the address each request came from. In the log the address is cut to its subnet: the last block of an IPv4 address becomes zero (/24), an IPv6 address keeps its start (/48).

The log also has the time, the connection port, the page address with the parameters after the "?", the status, size and duration of the response, a random request number and the request headers: browser name and version (User-Agent), language, the page you came from (Referer). Cookie values are replaced with a placeholder. The site's files, item images and the /api/health service check are not logged. The log is kept for up to 14 days.

If log forwarding is on, only the method, page address, status and request number of these lines go to the cloud.ru logging service. They are kept there for 3 days.

The site's programs write their own logs without the visitor's address: the route, status and duration of a response, and the request parameters only on an error. On the server these logs are limited by size, up to 100 MB per service, and there is also an archive of the last 20 site updates.

If a service behind the proxy server does not answer, the proxy writes an error line with the full address and headers of the request to its own log on the server. It stays there until newer lines push it out, up to 100 MB. Only the error text, with the address cut to the subnet, goes to the logging service.

Visit statistics

The GoatCounter counter runs on our own server (stats.exilebook.ru). Its data goes to no other service. It sets no cookies. If your browser or a blocker stops requests to the counter, the site works the same.

What the browser sends to the counter:

• the page address without the parameters after the "?", on load and on moving to another page; on exilebook.online it starts with /en and names no domain;
• when you first open the site: the site you came from, the domain only; moving between our two addresses does not count as coming from a site;
• the browser itself sends its User-Agent, of which the counter keeps the browser and system names with the major version.

The proxy server cuts the visitor's address before it reaches the counter: an IPv4 address to its /24 subnet, an IPv6 address to its first block. From the subnet the counter finds the country. It keeps the subnet together with the User-Agent string in memory for up to 8 hours after the last view, so that another view of the same page is not a new visitor. When the counter stops, this list is written to its database and deleted at the next start, though traces may remain in the database file until overwritten.

What stays in the database is counts: how many visitors a page had per hour, which sites they came from and, per day, browsers, systems and countries. There is no record of a single visitor. These counts are kept with no time limit. If a request looks like a robot, the counter keeps the page, the full User-Agent string and the time for 30 days.

Search runs in your browser and what you type does not go to the server. The exception is a search that found nothing. 1.5 seconds after you stop typing the counter gets its text in lowercase, up to 40 characters, once until the page is reloaded, and on exilebook.online with the mark en. The text stays in the counter's database until deleted by hand.

Text with an "@" and searches with a long number, 7 digits or more, are not sent, but this filter cannot recognise a name or other text, so please do not type personal data into the search. Opening a search result is counted without any text.

Error reports

Error reports are off at the moment: errors stay only in the server's logs.

What is kept in your browser

• The "bases-view" cookie: the list view in Bases, tiles or a table. It appears when you pick a view, lives for a year and goes to the server with requests to this address of the site, so that a reload brings the page in that view at once. Each of the two addresses has its own.
• localStorage: marks on the Syndicate board, picked mods in the map Regex, ticked quests, favourite and viewed Timeless seeds, the threshold and picks of the stash string in the scarab EV. The site does not send these records to the server. You can delete them in your browser's settings, and the marks will be forgotten. Each of the two addresses has its own records, and they do not move with you when you switch the language.

The settings of many tools also live in the page address, so that they can be shared as a link. When such a page loads from the server, the address with its parameters reaches the request log.

Links to other sites

Links to Trade (pathofexile.com), poedb, poewiki and other sites open only when you click them. Those sites have their own rules.

Contact

For questions about this data, write to ashahbalaev@gmail.com.