RSI Companion — Privacy Policy

RSI Companion is a browser extension that helps you interact with your Roberts Space Industries account (robertsspaceindustries.com) from the browser toolbar. The short version of this policy: the extension does not collect, transmit, sell or share any of your data. There is no analytics, no telemetry and no third-party backend. Everything stays in your browser.

1. Data we collect

None. RSI Companion has no server component and does not operate any backend. The developer of the extension has no way of seeing what you do with it, which ships you own, which articles you read, how often you open the popup, or whether you are even using the extension at all.

2. Data stored locally in your browser

To avoid re-fetching the same data from RSI on every popup open, the extension caches API responses and a handful of UI preferences in the browser's local extension storage (chrome.storage.local). This storage is scoped to the extension, stays on your device, and is never transmitted anywhere. It includes:

• Cached RSI API responses (ship matrix, hangar list, Spectrum threads, Comm-Link posts, roadmap snapshots, Galactapedia articles, etc.) — with short TTLs so the cache self-refreshes.
• Per-user preferences (active module, filters, starred ships and articles, sort orders).
• A small diff snapshot of the roadmap so the "what changed since your last visit" highlights can be computed locally.

You can clear this cache at any time from the extension's Settings panel, or by removing the extension from your browser.

3. Network requests

RSI Companion only talks to robertsspaceindustries.com, status.robertsspaceindustries.com, and ptu.cloudimperiumgames.com. Every network request goes directly from your browser to those hosts, using your existing RSI session cookies for authenticated endpoints. The extension does not proxy any traffic through a third-party server. No data is sent to the extension developer or to anyone else.

The PTU (Public Test Universe) host at ptu.cloudimperiumgames.com is only contacted when you explicitly run the Sync to PTU workflow in the Contacts module. PTU runs a separate Spectrum deployment with its own social graph, so mirroring your LIVE contacts there requires the extension to read the PTU session cookie and hit the PTU spectrum API directly. No PTU requests are made outside of that explicit user action.

4. Authentication and cookies

The extension does not set any cookies of its own. For features that require a signed-in RSI account (hangar, cart, Spectrum notifications, contacts, etc.) it reads the standard Rsi-Token cookie that the RSI website itself sets when you sign in, and attaches it as an x-rsi-token header to the API calls it makes on your behalf — exactly as your browser would when you navigate the RSI website directly. The cookie is read only from the robertsspaceindustries.com domain.

For the PTU sync workflow the extension additionally reads the separate Rsi-PTU-Token cookie set by ptu.cloudimperiumgames.com when you sign in on the PTU site, and attaches it as an x-rsi-ptu-token header on the PTU spectrum API calls. That cookie is read only from the PTU domain and never transmitted anywhere except back to PTU itself.

5. Permissions the extension requests

Each browser permission requested by the extension is used for one specific purpose:

• host permissions (robertsspaceindustries.com, status.robertsspaceindustries.com, ptu.cloudimperiumgames.com) — to fetch the data the extension displays. The PTU host is only contacted when the user explicitly runs the Sync to PTU workflow.
• cookies — to read the RSI session cookie described above.
• storage — to keep the local cache and your preferences between popup sessions.
• alarms — to schedule a periodic background check for new Spectrum notifications so the toolbar icon badge can show the unread count.
• tabs — to locate any open robertsspaceindustries.com tab. Only RSI tabs are queried; the URL, title or content of any other tab is never read.
• scripting — to read the CSRF meta tag from an open RSI tab so that cart / upgrade calls (which require the token) can succeed. The injected script is a two-line read-only DOM lookup bundled with the extension; it only runs on RSI tabs and makes no modifications to any page.

6. Third parties

The extension does not use any third-party analytics, advertising, crash reporting, tracking SDKs or external services of any kind. It does not load remote code. The only network host it contacts is robertsspaceindustries.com (and its status subdomain), which is the user's own RSI account provider, not a third party in the commercial sense.

7. Children

RSI Companion is a companion to the Roberts Space Industries website, which has its own age requirements. The extension itself does not collect any information from any user, adult or minor.

8. Changes to this policy

If future versions of the extension change anything material about how data is handled (for example if an opt-in analytics feature were ever added), this policy will be updated before that change ships, and the update will be mentioned in the extension's Release Notes panel.

9. Contact

Questions or concerns about this policy can be sent to waibcam@gmail.com or filed as a GitHub issue at github.com/waibcam/RSI_Companion.

10. Disclaimer

RSI Companion is an unofficial, fan-made tool. It is not developed, endorsed, sponsored or affiliated with Cloud Imperium Games, Roberts Space Industries or any of their subsidiaries. "Star Citizen", "Squadron 42" and related names and trademarks are the property of their respective owners.

This document was last updated on April 24, 2026, for RSI Companion v1.1.0.