Security

We take security seriously

RaiderBuddy keeps your account, your progress, your reminders and, if you link one, your ARC Raiders account's raids and stash. Keeping that safe matters to us as much as keeping the site fast. If you find a weakness in RaiderBuddy, we want to hear about it.

Your Steam or Epic Games login never leaves your PC, the game sign-in from Embark Studios is stored encrypted, payments are handled by Stripe, so we never see your card, and the database keeps each account's private data to that account.

Who handles security

RaiderBuddy is built and run by Tim Langner, who reads every security report personally and fixes what it finds.

How to report a problem

Email support@raiderbuddy.com with “Security report” in the subject. Please include:

• Where the problem is: the page, the address or API route, or the part of RaiderBuddy for Windows.
• What it is and the steps to reproduce it.
• What an attacker could do with it.
• Anything that helps us see it: screenshots, a video, a proof of concept or request logs.

Please keep the problem to yourself until it's fixed, so nobody can use it in the meantime.

What happens next

• We read every report and reply, usually within a few days.
• We tell you whether we could reproduce it, and keep you posted while we fix it.
• We let you know when it's fixed, and when you'd like, we thank you by name once it is.

Testing in good faith

When you look for problems, please:

• Use only your own accounts and data, and never open, change or delete anyone else's.
• Stop as soon as you reach data that isn't yours, and tell us what you saw.
• Don't slow the site down or take it offline: no denial of service, flooding or mass automated scans.
• Don't try to trick players or us: no phishing, social engineering or spam.
• Don't test the payment flow with real cards, or try to get Premium without paying.

If you follow these and report what you find to us first, we'll treat your research as done in good faith, work with you to fix it and won't take legal action against you over it.

What's covered

• raiderbuddy.com and beta.raiderbuddy.com, with their API routes and sign-in.
• RaiderBuddy for Windows: the main window, the in-game overlay and the helper that links your ARC Raiders account.
• Public raider profiles and the share pictures we draw.

Not covered here

ARC Raiders itself and your Embark Studios account are Embark's; please report problems with them to Embark Studios. The same goes for the services RaiderBuddy builds on, such as Steam, Epic Games, Discord, Google, Stripe, Supabase, MetaForge and our ad partner NitroPay: report a problem in them to them, unless it comes from how RaiderBuddy uses them.

For anything that isn't a security problem, like a bug, a wrong timer or an idea, come and tell us on Discord.