⚔️ OSRS Events

Privacy Policy

We believe your data is yours. Here is exactly what we collect and why.

Last updated: March 2026

Introduction

OSRS Events ("the Service") is a fan-made web application. We are committed to protecting your privacy and being transparent about what little data we store. This page explains what information is collected when you use the Service, how it is used, and your rights.

Data we collect

When you log in with Discord, we receive the following information from Discord's OAuth2 API:

Discord User ID

Your unique Discord identifier. Used to link your account across sessions and to identify you within the game.

Discord Username

Your Discord username at the time of login. Displayed on your profile and to other players on shared boards.

Discord Avatar URL

A link to your Discord profile picture. Shown on your profile card and as your token on the game board.

Display Name (optional)

A custom display name you may set yourself in your profile. Replaces your Discord username wherever your name appears.

Game Progress

Your current tile position, completed tiles, and daily dice roll count on each board you participate in.

What we do NOT collect

We intentionally collect as little as possible. The following data is never collected:

  • Email addresses
  • Passwords
  • Discord messages or server memberships
  • Analytics, page views, or behavioural tracking
  • Advertising cookies or tracking pixels
  • Any data sold or shared with third parties for commercial purposes

How data is stored

Your data is stored in a private PostgreSQL database. A JSON Web Token (JWT) is saved in your browser's localStorage to keep you logged in for up to 7 days. This token contains only your user ID and is never shared with third parties. You can clear it at any time by logging out.

Third-party services

We use one external service as part of the login flow:

Discord

Discord is used solely for authentication. Once logged in, we do not send any further data to Discord. Discord may log the OAuth2 authorisation request on their end.

Discord's Privacy Policy

Your rights

You have the right to access, correct, or delete the data we hold about you at any time. Logging out removes your local session token. To request permanent deletion of your account and all associated data, please contact us.

Request account deletion

Send us an email with the subject 'Account deletion request' and we will remove your account and all associated data within a reasonable timeframe.

Send deletion request

Changes to this policy

We may update this Privacy Policy from time to time. Significant changes will be announced via our Discord server. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.