Privacy
Quantum is a free fan-made companion for Star Citizen. This page says what the Quantum server at quantumsc.org keeps about you, why, and for how long. It keeps as little as it can, sells nothing and shows no ads.
Browsing this website
You don't need an account to use the commodity and trade route pages. There are no analytics, trackers or advertising cookies. Like any web server, the server sees your IP address with each request. It's used to stop abuse (rate limits) and kept in memory for the owner's traffic view, and it appears in the server's logs.
The site is served through Cloudflare, which handles the connection and protects the server from attacks. See Cloudflare's privacy policy.
A Quantum account
You need a Quantum account, with your UEX name linked, to send anything to the server from the app (price reports, pictures, positions, alignments, jobs) and to use friends, messages, the marketplace and orgs. Browsing prices doesn't need one. If you create an account, the server keeps:
- Your email address, to sign you in and to send account emails (confirming your address, a reminder if you haven't, resetting your password, telling you when your UEX name moves to another account). No newsletters or marketing. Your email is never shown to other players. A record of each email sent (the address, subject, time and whether it was delivered, never the message itself) is kept for 30 days so delivery problems can be fixed.
- Your password, as a one-way hash (scrypt). Nobody, including the owner, can read your password from it.
- Your username, chosen when you sign up (or made from your UEX name for older accounts). It's your public name everywhere in Quantum and is permanent; only the server owner can change it, if you ask.
- Your sign-ins: when each began and was last used, its IP address and browser or PC name, so you can see and end them. Only a hash of each sign-in token is stored.
- Your profile, if you fill it in: a profile picture, organization and bio.
- Your linked UEX datarunner name, if you link one. To learn it, the server asks UEX whose Secret Key you entered.
- Your UEX Bearer Token and Secret Key, only if you choose to save them in your account (on the account page, or with the switch in the app). They're checked with UEX, then stored encrypted with a key kept apart from the database, and only the Quantum app signed in to your account can read them back. The website shows only their last 4 characters. Remove them at any time from the account page or the app; unlinking your UEX name or deleting your account removes them too. Otherwise a key you enter is used once, and is never stored or logged.
The sign-up and forgotten-password forms use Cloudflare Turnstile to keep bots out. Signing in sets one cookie,
qsession, which only keeps you signed in. Accounts that are never confirmed are removed after 7 days.
Friends and messages
- Friends, requests and blocks you make, so the app can show them.
- Messages you send and receive, kept for 365 days and then deleted. They're stored on the server so they reach the other person. They aren't end-to-end encrypted, so the server owner could read them; they're only looked at to deal with abuse.
- Your online status: when the app last checked in, whether you chose online, away or invisible, and whether Star Citizen is running. Friends see it; on your profile, others see when you were last online unless you're invisible.
- Players who aren't friends can message each other only when they have a reason to: a marketplace enquiry or trade, escrow, or being in the same org.
Your profile
Other players can open your profile by clicking your name. You choose who can see it (everyone, friends only, or only you) and what it shows, under Profile in the app. Your ships and gear loadouts live on your PC; the app sends the server only the ones you chose to show, so it can show them to others. Your orgs, listings, seller rating and datarunner rank come from what the server already has.
The marketplace
- Your listings: title, description, category, price, quantity and picture. They're public to signed-in players, and come down after 30 days unless you renew them.
- Trades you take part in (who, what, price, status and their history), ratings and reviews you give and get (stars, quick tags and a short review, shown on the profile of the person reviewed with your name), reports you make about listings, and escrow agent applications. Trade records are kept so both sides and the escrow agent keep their history.
Orgs
- Orgs you create or join: the org's name, tag, slogan, description and About page, logo and banner, ranks and rank icons, its members and their ranks, invitations and join requests (with your RSI handle, if you give one), and its calendar events, RSVPs and crew seats.
- RSI verification: to verify an org, the server reads that org's public page on robertsspaceindustries.com to look for the code. Nothing about you is sent to RSI.
- A private org is hidden from Find orgs, and from the profiles of people who aren't in it.
Using the Quantum app
The map, routes, contracts, gear and the Location Clock Overlay work entirely on your PC. When you use the community features, the server keeps what you send:
- Price reports you send to UEX as a datarunner (terminal, commodity, price, stock), with your UEX name, so they can be checked against UEX's copy and counted toward your rank, and a smaller copy of the report's screenshot, which only the review team can see and which is deleted after 14 days.
- Which build of Quantum you're using: its version and a fingerprint of the program (not of you or your PC), with your UEX or Quantum name and IP address, so the review team can tell official releases from modified copies. Kept 90 days.
- Pictures, station positions, pad sizes and planet alignments you share, with your UEX name.
- Bug reports you send, with any contact details you choose to include.
- Encrypted backups, if you use them. They're locked with your UEX Bearer Token on your PC first; the server only stores data it can't read. (If you also save your UEX keys in your account, the server holds your token too, and could open your backup.)
Pictures, positions, alignments, bug reports and backups also keep the IP address they were sent from, to stop abuse. What you share publicly (prices, pictures, positions, listings) is shown to other players. Backups not updated for a year are removed.
Moderation
The server owner and moderators they appoint can review and remove shared content, take down listings, and suspend or ban accounts that misuse the service. Actions on the admin page are recorded with who took them.
Other services
Prices and trade data come from UEX. Your browser doesn't contact UEX from these pages; the server does. If you send reports to UEX, UEX's own privacy policy applies to what it receives.
Your data and removing it
Download my data gives you a copy of everything your account holds, including your friends, messages, listings, trades and orgs (your saved UEX keys themselves are left out).
Deleting your account from the account page removes it, your sign-ins, profile, picture and saved keys at once. Within about an hour your friends, blocks, messages, published profile and org memberships are removed too, your listings come down and their pictures are deleted, and an org you owned passes to its highest-ranked member (or is deleted if it has none). Trades you took part in stay in the other player's history, showing "Deleted account". If your UEX name is linked, you can tick the box there to also delete everything sent under that name (reports, pictures, positions and the rest). Otherwise, open an issue on Quantum's GitHub page, and be ready to show the UEX name is yours.
Changes
If this page changes in a way that matters, the date below changes and the app's release notes say so. The rules for using the server are on the Terms page.
Last updated: November 2026.