Last updated: 6 October 2026
Rare Thief LLC (“we”, “us”) operates the Sea of Thieves Interactive Map at maps.seaofthieves.rarethief.com, the Sea of Thieves Progress Tracker at tracker.seaofthieves.rarethief.com, and the SoT Companion (Unofficial) apps for iOS and Android. This policy explains what information those services collect, why, and what control you have over it. It covers both websites and both apps; where they differ, we say so.
All of them are free to use. The map and the apps are supported by advertising, and an optional paid subscription removes advertising in the apps. The Progress Tracker shows no advertising at present. We are not affiliated with Rare Ltd. or Microsoft, and Sea of Thieves is their trademark.
The map remembers your choices: which marker categories you have enabled, your language, locations you have marked as completed, and (in the apps) where you last left the map. This is kept in your browser’s local storage or the app’s local storage on your device. We never receive it, and it cannot be used to identify you. Clearing your browser data, or uninstalling the app, removes it permanently.
If you sign in, the same storage keeps your sign-in from Microsoft, with your gamertag, gamerpic and email address, so you stay signed in, and the trackers remember which of your pirates you last viewed. Logging out removes the sign-in.
Custom Maps (creating, saving and sharing your own maps) and tracking your own progress both require signing in with your Microsoft/Xbox account. Sign-in happens with Microsoft, not with us: we never see or store your password. Microsoft returns a token which lets us confirm who you are.
Microsoft also gives the website your account’s email address at sign-in. It stays in your browser: we never store it on our servers. On the map’s website a one-way hashed form of it goes to our advertising partner (see Advertising).
When you use Custom Maps we store your Xbox user ID (XUID), so your maps belong to you, and the maps you create (their names, markers, routes and notes) together with a record of any maps created by other players that you have saved.
This data lives in our own database, hosted with Amazon Web Services. We do not sell it, and we do not use it for advertising. If you never sign in, none of it exists.
The Progress Tracker website, and the Commendation Tracker on the map and in the apps, are one service with one set of your data. You import your progress from the official seaofthieves.com website with a bookmark you run in your own browser while signed in to the official site. The bookmark reads the same progress data that page already shows you and sends only that to us. It never sends your Microsoft password, cookies or session.
When you import, we store, linked to your XUID:
Commendation names, descriptions and requirements from imports are also merged into a shared, anonymous catalogue that all visitors browse; it contains no player progress and nothing that identifies you. The same is true of achievement, season reward and cosmetic names, descriptions and images. When an import brings something the catalogue does not have yet, we check it before it joins, and while we do, it is kept with a one-way code of the account that brought it, never the account itself.
We also store the address of your Xbox gamerpic, which the official site provides alongside your balances. It is shown to you in the tracker. A shared page shows a copy of the picture that we keep with the page, never its address, and the copy goes when you stop sharing.
Sharing is off unless you turn it on, for each of your pirates. When you turn it on we publish a copy of part of your tracker data to a random, unlisted web address that only you are given. Anyone you give that link to can open it. Like any page’s address, it is seen when the page is opened by our analytics, by our error reporting if something goes wrong there, and on the map by our advertising partners. Nobody can change anything through it, and search engines are asked not to index it.
Every shared page contains your gamertag, your gamerpic, your commendation progress, your per-company reputation levels and the date you last imported. If you switch the option on, it also shows your Gold and Doubloons. If your account has more than one pirate, each pirate has its own link and the page says which one it is by number (Pirate 1, Pirate 2), never by the name you gave it.
You also choose which sections it shows. When you start sharing, Achievements, Chest and Seasons are on and Milestones and Guilds are off; you can change any of them at any time.
Turning a section off takes its copy down within a couple of minutes.
We also publish a picture of the page’s card, which apps like Discord show when the link is pasted. It contains nothing the page does not. Once a link has been posted somewhere, that service may keep its own copy of the picture for a while after you stop sharing.
A shared page never contains your Ancient Coins, your currency history, your history of changes between imports, which factions or milestones you have pinned, when you reached a milestone level, your guilds’ voyages, your pirates’ names, your import key, your XUID, or your email address. Your XUID is never published anywhere, and the share address is random rather than derived from it, so the two cannot be connected by anyone holding the link.
You can stop sharing or replace your link at any time from the tracker. The old address stops working within a couple of minutes and shows only that sharing has stopped. Starting again gives you a different address; an old one never becomes live again. Clearing your saved progress and deleting your data both stop sharing as well. Old copies of a shared page are erased from our storage within about two days.
In the apps you may buy a subscription (or may hold an older one-time purchase) that removes advertising. Payment is handled entirely by Apple or Google; we never see your card details. To know whether your subscription is active we use RevenueCat, which records your purchase history and an anonymous identifier for your installation. Purchase records are not linked to your Xbox account.
In the apps, banner advertising is served by Google AdMob. The Google Mobile Ads SDK collects and shares your device’s advertising ID, IP address, interactions with the ads and the app, and diagnostic information, and uses these for advertising, analytics and fraud prevention. You can reset or delete your advertising ID in your device settings, and subscribing removes advertising from the app altogether.
On the map’s website, advertising is served by Raptive (formerly AdThrive) together with Google’s advertising systems, which use cookies and similar technologies. If you are signed in with Xbox on the map, we pass Raptive a one-way hashed form of your email address, which is used to match advertising without revealing the address itself.
The Progress Tracker shows no advertising at present.
Both websites use Google Analytics to understand general usage: which pages are visited, roughly from where, and on what kind of device. It records each page’s address and title. On your own Guilds and Milestones pages these include your guilds’ and ships’ names, and on a shared page its gamertag, and its guilds’ and ships’ names when those sections are shared. On the Progress Tracker, visitors in the EEA, the UK and Switzerland are measured without cookies or identifiers stored on their device. The Progress Tracker uses the same Google Analytics as the map, which our advertising partner Raptive can see for its reporting.
The apps can send notifications about in-game events and app news. These are off unless you turn them on, and you can turn them off at any time in your device settings. If you enable them, Google’s Firebase Cloud Messaging issues a token identifying your installation so notifications can be delivered. It is not linked to your name or Xbox account.
Like any website or app, our servers and content delivery providers process technical information when you connect: your IP address, device and browser type, and which pages or map data you requested. We use this to serve the websites and apps, keep them working, and protect them from abuse.
When something breaks, the websites and apps send an error report to Sentry so we can find and fix the problem: the error message and stack trace, the page you were on, the steps that led to it on that page (clicks, page changes and requests made), and your browser or device type. Sign-in codes are removed first. Error reports are not used for advertising or profiling.
| Service | What for | Their policy |
|---|---|---|
| Google AdMob | Advertising in the apps | Policy |
| Raptive | Advertising on the map’s website, and reporting from both websites’ Google Analytics | Policy |
| Google Analytics | Website usage statistics | Policy |
| Firebase Cloud Messaging | Delivering notifications | Policy |
| RevenueCat | Managing subscriptions | Policy |
| Apple / Google | Processing payments, app distribution | Apple · Google |
| Microsoft | Xbox account sign-in, and your gamerpic | Policy |
| Amazon Web Services | Hosting both websites and our database | Policy |
| Cloudflare | Delivering both websites | Policy |
| Sentry | Error reporting when something breaks | Policy |
We do not sell your personal information.
You can delete everything yourself. On the Progress Tracker, Delete all my data on the Import page removes all your tracker data and shared pages. On the map or in the app, Delete account and data in the Custom Maps panel removes your custom maps and your tracker data together. Full instructions, and an email option if you cannot sign in, are on the account deletion page. Deletion is immediate and cannot be undone.
Depending on where you live you may have rights to access, correct, export or delete the personal information we hold, and to object to or restrict certain processing. Email us and we will help, usually within 30 days. Residents of the EEA, the UK and certain US states have specific rights under laws such as the GDPR and the CCPA; we honour requests under those laws regardless of where you live. In the EEA and UK you will be asked for advertising consent when you first open the app, and you can change that choice later.
Where laws such as the GDPR require a reason, ours are:
We are based in the United States, and our database and websites are hosted there. If you use the services from elsewhere, your information is transferred to and processed in the United States. Our providers offer safeguards for such transfers, such as the European Commission’s Standard Contractual Clauses.
If you are in the EEA or the UK and are unhappy with how we handle your information, you can complain to your local data protection authority (in the UK, the Information Commissioner’s Office). We would welcome the chance to put it right first.
These services are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
All data is transmitted over encrypted connections (HTTPS/TLS), and access to our database is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable measures to protect your information.
The map and the Progress Tracker link to other websites, including Rare’s official Sea of Thieves pages and our own shop and articles. We do not control those sites and are not responsible for their privacy practices.
We may update this policy as the services change. The date at the top shows when it was last revised, and material changes will be noted here.
Questions, requests or concerns: [email protected]
Rare Thief LLC, 2820 S Alma School Rd Ste 18 Pmb 510, Chandler, AZ 85286, United States