HANGAR SYNC / 隐私政策

Privacy Policy

AnywhereExp Hangar Sync

Effective and last updated: November 2, 2026

Hangar Sync checks your RSI login and, when you choose to synchronize, reads your hangar and sends ship results to Anywhere Express. Your RSI authentication token is sent only to RSI. Saving changes to the website requires a separate confirmation, and saved fleet records are publicly visible.

本工具会检查 RSI 登录状态。点击同步后，会读取机库并将舰船结果传送到哪都通。RSI 登录令牌只用于 RSI 官方请求；网站上的舰队变更须另行确认，保存后的成员舰船资料会公开展示。

1. Scope and operator

This policy covers the AnywhereExp Hangar Sync browser extension and the transfer and storage of its synchronization results on the Anywhere Express website. The service is operated by the Anywhere Express (哪都通) community project. It is a fan-made Star Citizen tool and is not affiliated with Cloud Imperium Games or Roberts Space Industries (RSI).

2. Information handled

RSI account status and handle: used to show the current account, associate a scan with that account, and check that the account has not changed during synchronization.
RSI authentication cookie: the extension reads the existing Rsi-Token cookie on robertsspaceindustries.com to authenticate requests to RSI. Its value is handled at runtime; it is not saved in extension storage, included in diagnostic exports, or transferred to Anywhere Express.
Hangar content: ship and product names observed in My Hangar, recognized ship-model mappings, and names that still need to be identified.
Matching and verification data: hashed account, pledge and item identifiers; scan timestamps; page and completion information; warnings; and synchronization status. Hashed identifiers are used to match records and should not be treated as anonymous information.

The extension does not ask you to enter your RSI password. It does not use a browsing-history collection feature or an advertising or analytics SDK. The downloaded hangar HTML is parsed as data; page scripts are not executed.

3. When information is used and transferred

Opening the popup or selecting Refresh checks the current RSI login and account handle using the browser's existing RSI session. These authenticated requests go to RSI's official HTTPS endpoints.

Clicking Sync Hangar (同步机库) starts the hangar scan and verification. On completion, the extension opens the Anywhere Express import page and transfers ship results, unresolved names, matching identifiers and available scan-verification metadata to that page. The website can receive this draft before you save any fleet changes.

Confirming on the website authorizes the displayed additions, links and any reviewed removals for your own fleet. Website sign-in and organization membership checks determine which member record can be updated. The website's sign-in session is managed separately from your RSI session.

Information is used to provide hangar synchronization, prevent duplicate or incorrect record changes, show your fleet, and resolve synchronization or security problems.

4. Public fleet records

Saved fleet records are public. They may show your website member identity and its associated ship models, optional ship names, ship introductions and photographs. Visitors can browse these records through member and fleet pages. Review the displayed changes and your ship information before confirming a save.

RSI authentication tokens are not published. Matching metadata, synchronization audit records and recovery backups are kept separately from the public fleet display.

5. Recipients and service providers

RSI: receives account and hangar requests using your existing RSI session.
Anywhere Express: receives the synchronization draft and, after your confirmation, stores the resulting fleet records and necessary private matching, audit and recovery data.
Website infrastructure: the website uses Cloudflare for hosting, Supabase for authentication and database services, and jsDelivr to load its Supabase browser library. These services may receive ordinary connection metadata when their resources are requested, such as an IP address, browser information, request path and time. RSI and infrastructure providers also operate their own services under their respective policies.
Website visitors: can view fleet records that you confirm for public display.

Authorized administrators may handle private information when needed for support with your consent, security investigations, or legal obligations. Public fleet information is intentionally available to visitors following your publication confirmation.

6. Storage and retention

Information	Storage and controls
RSI authentication token	Read from the existing RSI cookie and used at runtime only for RSI requests. The extension does not create a stored copy of its value in its own storage or on the Anywhere Express website.
Extension scan results, account status and progress	Kept temporarily in browser extension session storage. Drafts are accepted for handoff for up to 30 minutes; handoff access expires after 10 minutes and is released after delivery. These validity limits are not timers that immediately delete every cached value. Chrome clears extension session storage when the browser restarts or the extension is disabled, reloaded, updated or removed.
Website import draft	Held in the import tab's session storage. The page restores a draft only when it is less than 30 minutes old. Use Clear Draft (清空草稿) or clear the website's browser data to remove the local draft. Clearing a draft does not delete saved website fleet records.
Saved fleet records and private synchronization records	Fleet records remain until you or an authorized administrator deletes them. Private matching records, audit entries and recovery backups may remain after a fleet record is removed and are retained until administrators remove them. The current service does not apply a fixed automatic deletion period to all of these records. Contact the administrators to request access, correction or deletion, including removal of related private records.

The website's own authentication provider may keep its sign-in session in browser storage. Signing out of the website is separate from signing out of RSI.

7. Your choices and deletion requests

You can choose not to start synchronization, stop a running scan, or close the import page without confirming fleet changes.
You can clear the website import draft and edit or remove your own saved ships through the member dashboard when your account has the required access.
To clear the extension's temporary session data, restart the browser or disable, reload or remove the extension. This does not delete data already saved on the website or remove your RSI cookies.
For a request involving your account, synchronization records or recovery backups, contact the Anywhere Express administrators using the contact link below. We may need to verify ownership of the affected website member record. Do not send passwords, authentication cookies or login tokens.

8. Limited use and security

Use and transfer of information received through this extension adhere to the Chrome Web Store User Data Policy, including its Limited Use requirements. Information is limited to the extension's disclosed hangar-synchronization purpose and permitted related support and security uses.

We do not sell user data, transfer it outside permitted uses, use it for unrelated purposes or personalized advertising, or use or transfer it to determine creditworthiness or for lending purposes.

Requests and transfers to RSI and the website use HTTPS. Access checks limit website changes to the approved member account and authorized administrators. No service can guarantee absolute security.

9. Changes to this policy

Changes will be reflected on this page with an updated date. Material changes to how user data is handled will also be disclosed in the extension or website as applicable, with consent obtained where required.

10. Contact

Anywhere Express (哪都通) community administrators

For support, privacy questions, or requests to access, correct or delete your data, contact an administrator through the Anywhere Express Discord community ↗. The organization website also provides its community contact links.