Privacy Policy

1. Introduction

RuneScrap is a community-built platform for Old School RuneScape players to track their in-game progress and achievements. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using RuneScrap, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service.

2. Information We Collect

• Account & authentication data — your email address, managed via Supabase Auth when you create an account.
• OSRS account names — the in-game character names you link to your RuneScrap account.
• In-game event data — kills, levels, loot, collection log entries, and other events sent by the Dink RuneLite plugin on your behalf.
• Screenshots — optional screenshots attached to events, stored in Cloudflare R2.
• Usage & error data — anonymized error reports and stack traces collected by Sentry to help us diagnose and fix bugs.

3. How We Use Your Information

• Provide and operate the RuneScrap service.
• Display your in-game progress and event history.
• Send Discord notifications for events you have configured (kill counts, drops, levels, etc.).
• Diagnose errors and improve platform reliability.
• Communicate important service updates when necessary.

We do not sell your personal data to third parties, use it for advertising, or share it beyond what is described in this policy.

4. Data Sharing & Third Parties

RuneScrap relies on the following sub-processors. Your data may be processed by these services in accordance with their own privacy policies:

• Supabase — authentication and database. supabase.com/privacy
• Cloudflare — CDN, hosting, serverless workers, queues, and R2 object storage. cloudflare.com/privacypolicy
• Sentry — error tracking and performance monitoring. sentry.io/privacy

We do not use advertising networks or analytics providers that track you across other websites.

5. Data Retention

Your data is retained for as long as your account is active. If you delete your account, your personal information (email, linked OSRS accounts, and associated event data) will be removed from our systems. Residual data in backups may persist for a short period before expiring.

6. Security

We take reasonable technical and organizational measures to protect your data, including encrypted transport (HTTPS), access controls, and reliance on reputable infrastructure providers. However, no system is completely secure, and we cannot guarantee absolute protection against all threats.

7. Children's Privacy

RuneScrap requires an account to use. By creating an account, you confirm that you are at least 13 years of age. We do not knowingly collect personal information from children under 13.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal data.
• Receive a copy of your data in a portable format.

To exercise any of these rights, please contact us at privacy@runescrap.net.

9. GDPR (EU/EEA Residents)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR).

Legal basis for processing. We process your personal data on the following bases:

• Contract — processing necessary to provide the service you signed up for (account management, event tracking, Discord alerts).
• Legitimate interests — error monitoring and platform reliability via Sentry.
• Consent — where you have explicitly opted in to a specific feature.

Additional rights under GDPR:

• The right to restrict or object to processing.
• The right to lodge a complaint with your local data protection authority.

To exercise these rights, contact us at privacy@runescrap.net.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. Continued use of RuneScrap after changes are posted constitutes your acceptance of the revised policy.

11. Contact

If you have questions or concerns about this Privacy Policy or how your data is handled, please reach out:

privacy@runescrap.net