Every service it talks to
20 services on the allow-list
Cartmark connects to each service the way that service allows, and keeps a list of exactly where it is permitted to go. Nothing else leaves your network, and there is no telemetry of any kind.
Stores and rewards
| Service | What for | How it connects |
|---|---|---|
| Steam | Owned games, play time, achievements, prices, free claims, downloads | Web API key; a QR sign-in for claiming and downloads |
| GOG | Owned games, prices, free claims, installers, build lists to prove a PC game | GOG's own sign-in link |
| Epic Games Store | Owned games, weekly free games | A one-time code swapped for a token |
| Microsoft / Xbox | Play history, prices, redeeming codes, the Game Pass catalogue | OpenXBL key (history only); Microsoft's public catalogue |
| PlayStation | Owned games, the PlayStation Plus catalogue | A token from Sony's site; Sony's public catalogue |
| Nintendo | Owned Switch games and memberships | Switch Online sign-in, plus a paste of the order history |
| Humble Bundle | DRM-free games and keys for other stores | One session cookie |
| Amazon Prime Gaming (Luna) | Monthly free games and codes | Amazon's public announcement; claiming is yours |
| Twitch | Drops campaigns, rewards, channel points | Your own sign-in, handed over from your own browser |
| IsThereAnyDeal | Prices on every other store, 5-year history, giveaways | API key |
The catalogue and the lists
| Service | What for | How it connects |
|---|---|---|
| IGDB | The game catalogue: names, dates, series, store ids | API key |
| TheGamesDB | Artwork, trailers, disc serials | Its weekly public data file |
| RetroAchievements | Which dumps have achievement sets; each person's own achievements | API key; each person's own key for their achievements |
| Wikidata | Character collections (every Mario game, etc.) | Public queries |
| The libretro database | No-Intro, Redump and FinalBurn Neo lists: names, sizes, checksums and serials, nothing else | Public files, read when the catalogue is synchronised |
| ClamAV's definitions | The virus definitions every Windows download is scanned with | Public files, every 12 hours |
On the home network only
| Service | What for | How it connects |
|---|---|---|
| Prowlarr, SABnzbd, qBittorrent | Searching the indexers and download clients you configure yourself | On the home network only |
| An existing library manager | Importing a library you already keep | On the home network only |
| Your machines | The TV box, the PCs and the handhelds pick up their work and report | They call Cartmark; it never calls them |
Alerts, dashboards and the way in from away
| Service | What for | How it connects |
|---|---|---|
| ntfy, Discord, Apprise | Alerts to your phone or a channel; codes to a channel that is yours alone | An address you enter, or Cartmark's own ntfy server beside it |
| Grafana, InfluxDB, Prometheus | Dashboards and alert rules | A token-protected metrics page |
| Tailscale | Machines at another house, phones getting their codes, reaching Cartmark from away | A private node beside Cartmark; never the open internet |
Showing 20 of 20