Elite Dangerous Wiki:Privacy policy

This policy explains how Mistflux Games handles personal information when you use Elite Dangerous Wiki at elite.mistflux.co.uk. It applies to this independent wiki, rather than to Frontier Developments, Fandom or Wikimedia.

Operator and data controller: Mistflux Games
Privacy contact: support@mistflux.co.uk
Last updated: 31 October 2026

Who we are

Elite Dangerous Wiki is an independent, non-commercial community reference about Elite Dangerous. Mistflux Games operates the wiki and is responsible for deciding how personal information collected through it is used. You can contact us at the address above without creating an account.

This notice covers readers, account holders, contributors and people who contact us. Our handling of personal information is subject to applicable UK data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, as amended.

Information we collect

Information	How it is used
Technical and security information: IP addresses, request dates and times, page addresses, browser/device information, errors and authentication or abuse-prevention events.	Delivering pages, diagnosing faults, protecting accounts, limiting spam and investigating misuse. Page addresses in logs may include search terms or other information submitted in a URL.
Account information: username, password verification data, email address if supplied, email-confirmation status, account settings and permissions.	Operating your account, remembering preferences, sending requested account messages and recovering access. Passwords are stored using MediaWiki's password-hashing mechanisms, rather than as readable passwords.
Contributions: edits, edit summaries, discussions, uploads, file descriptions, timestamps and associated contributor information.	Publishing and maintaining the wiki, crediting contributors and preserving the history of changes.
Communications: information you send to administrators or to our support address.	Answering enquiries, handling privacy requests and investigating reported problems.

Reading public articles does not require an account or an email address. At the date of this notice, editing requires an authorised registered account and public self-registration is disabled. Providing an email address enables email confirmation and password recovery; without a usable address, email-based recovery may not be possible.

Do not put passwords, private contact details, financial information or other sensitive information into articles, edit summaries, discussion pages or uploaded files. Files can contain embedded personal information, such as image metadata.

Public and restricted information

Articles, discussions, uploaded media, usernames, contribution histories and public administrative logs can be read, copied and indexed by other people and search engines. Previous revisions may remain visible after a page is edited. If editing without an account is enabled, an IP address or other MediaWiki-provided temporary contributor identifier may be associated with those contributions; the editing interface should be checked before submitting.

Your account email address and password verification data are not published as part of your normal profile. Authorised operators and administrators may access restricted information where needed for support, security or administration. Access to CheckUser information is restricted to users with the relevant permission. Hiding or deleting a wiki page is different from removing every retained copy or revision.

The wiki includes material imported from the Elite Dangerous wiki on Fandom and supporting templates or documentation from Wikipedia, Wikimedia Commons and MediaWiki documentation. Imported contributor names, timestamps and edit summaries may be retained to record authorship and comply with applicable licences. A source account name in an imported revision does not mean its owner registered an account here. We do not receive source-account passwords merely by importing page history.

Why we use information and our lawful bases

We rely on legitimate interests for operating this non-commercial reference, keeping it available, providing accounts and requested account emails, preventing abuse, supporting users, and maintaining a reliable and attributed editing record. We consider the effect on individuals and limit the information used to what is necessary for those purposes. You may object to processing based on legitimate interests.

Where processing is necessary to meet a legal obligation, we rely on that obligation. Where we ask for consent for an optional use, you may refuse or withdraw it without affecting processing that has another lawful basis. We do not treat visiting the site as blanket consent to unrelated uses.

Anti-abuse tools can automatically challenge or limit suspicious requests. We do not use them to make solely automated decisions producing legal or similarly significant effects about you. Contact us if a challenge or restriction incorrectly prevents legitimate access.

Cookies and browser storage

MediaWiki uses cookies and browser storage for features such as sessions, signing in, security and remembering appearance choices. Blocking or clearing these can sign you out or reset preferences. MediaWiki's configured general cookie expiry is 30 days and its extended remembered-login expiry is 180 days. These settings do not describe every individual cookie: some session values expire sooner, and browser storage may remain until cleared.

Storage that is strictly necessary for a service you request can be used without separate cookie consent. Non-essential storage must be handled under the applicable consent or exemption rules. This notice does not authorise advertising or cross-site tracking. No advertising or third-party analytics script was present on the homepage when this notice was prepared; changes to optional tracking require a fresh privacy assessment and appropriate notice and controls.

Service providers and external websites

We use infrastructure and service providers to operate the wiki:

• Hosting and administration: our hosting provider and authorised technical operators process stored data and server logs to run and maintain the service.
• Cloudflare: DNS and R2 media-delivery/storage services may process network information when serving the wiki's domain or its media. See Cloudflare's privacy policy.
• hCaptcha: selected account and anti-abuse actions use hCaptcha. When it is loaded, its provider, Intuition Machines, can receive an IP address, browser/device information and challenge-interaction data. See hCaptcha's privacy policy.
• Email delivery: our mail infrastructure and the receiving email provider process addresses, message content and delivery information for account emails and support correspondence.

We do not sell personal information. We share it only as needed to operate the service, deal with a request or incident, meet a legal requirement, or protect legitimate rights. Public wiki material is, by its nature, available to others under its applicable licence.

Following an external link takes you to another operator's site and privacy practices. If a third-party media player is offered, activating it may send information to that provider. Imported attribution links do not require you to sign in to the source wiki to read local articles.

International processing

Public contributions are available worldwide. Infrastructure providers, email providers and security services may also process information outside the UK, including in the United States. hCaptcha's published UK transfer arrangements use EU Standard Contractual Clauses with the UK Addendum and also describe participation in the UK Extension to the EU-US Data Privacy Framework. Cloudflare's Data Processing Addendum provides transfer mechanisms including the Data Privacy Framework and Standard Contractual Clauses with the UK Addendum, as applicable to the transfer.

Transfers to a country or recipient covered by applicable UK adequacy regulations can rely on that adequacy; other restricted transfers require an applicable safeguard or permitted exception. These provider arrangements do not mean every recipient or processing activity is covered by the same mechanism. Contact us for the details and copies of relevant safeguards, subject to necessary redaction of confidential information.

How long information is kept

We use the following retention criteria:

• Public contributions and attribution: normally kept as part of the continuing wiki and its revision history, including after an account stops being used. Privacy concerns can justify restricting or removing particular material, subject to applicable rights and obligations.
• Accounts and preferences: retained while the account is used and for as long as reasonably needed to administer it, protect the editing record or address misuse. Contact us about closure or removal of private account details.
• Technical and security records: kept for troubleshooting, abuse prevention and incident investigation, then removed or rotated when no longer needed. CheckUser's configured data-age limit is 90 days; other logs can have different retention and necessary incident evidence may be preserved longer. A configured age limit is not a promise that every copy is erased at that instant.
• Support correspondence: kept while an enquiry is active and afterwards only as needed to record its outcome, handle a dispute or meet an applicable obligation.
• Routine local backups: created nightly at 03:00 UTC, with the seven most recent successful backup sets retained. Separately retained migration or recovery snapshots may exist. Backups are restricted recovery copies, not a public archive. Deletions may take time to age out of backup copies; retained data must not be returned to normal use contrary to a valid restriction or deletion decision.

Your rights

Depending on the circumstances and the lawful basis, you may ask for access to your personal information, correction of inaccurate information, erasure, restriction of processing, or portability where that right applies. You may object to processing based on legitimate interests and withdraw consent where we rely on it. These rights are not absolute; a public editing history or licensing obligation does not automatically override a valid privacy request either.

Email support@mistflux.co.uk with enough information to locate the relevant data. We may request proportionate evidence of identity or authority before disclosing or changing private information. Do not send identification documents unless we explain why they are needed and how to provide them safely. We normally respond within one calendar month, subject to extensions and other time-limit rules allowed by law, and explain any refusal or limitation.

You can complain to us and may also complain to the UK's Information Commissioner's Office at ico.org.uk/make-a-complaint/. You do not need to complete an internal complaint before contacting the regulator.

Children and changes to this policy

This is a public game-information wiki, not a service intended to collect private information from children. Younger contributors should avoid sharing identifying information in public content. A parent or guardian can contact us about a child's information. If we introduce processing requiring parental consent, it must be assessed before it is enabled.

We update this page when relevant practices change and show the revision date above. Material changes affecting account holders may also be announced on the wiki. This notice does not change the copyright licence of existing contributions or replace the wiki's conduct and content policies.