Privacy
This policy tells you what the site stores, who else reads it, and how long the site keeps it. It uses ordinary words. It is short, because the site collects little data.
Last revised 4 September 2026
1. This policy can change
The operator can change this policy at any time. The date above gives the time of the last change. The site announces an important change.
This policy is a part of the terms at /terms. Read the two documents together.
2. Definitions
These three words have these meanings in this policy.
OSRS Clans, the site, or this site: osrsclans.cc. One person operates it. It is not a company.
The service: the website, the API behind it, and the share cards and the images that it serves.
You, or a visitor: each person who reads the site, with or without a sign-in.
3. Important information
Most readers want to know these three facts first.
The site is not for a person less than 16 years old. The operator keeps no account for such a person.
The operator sells no data, rents no data, and gives no data to an advertiser. No page shows advertising.
The site counts its own page views. It uses no third-party analytics service, no tracking pixel and no advertising network. It sets no cookie for this and it stores no address.
4. What the site collects automatically
Each request goes through Cloudflare and then through the web server of the site. Each of the two writes one line about the request. The line contains the address that sent the request, the page that it asked for, the status of the answer, the user-agent string of the browser, and an identifier. The identifier connects the three logs of one request.
These lines keep the site operational and show an attack. The site does not connect them to an account. No person reads them to make a record of a visitor.
5. How the site counts a page view
The site counts each page that it draws. A small script in the page reports the address of the page, and the width of your window. It reports a press on a link that goes to a different site. It reports no other operation.
The site names you for one day with a number. The server makes that number from your address, your user-agent string and a random value of the day. The site stores the number and stores neither your address nor the random value after the day ends. Thus one day and the next day give you two different numbers, and no person can calculate the number from an address.
The site keeps these rows for 30 days. Then it deletes them, together with the random value of their day. The site keeps the totals of each day, which name no visitor.
The site tells each clan how many people read the clan page, which countries they were in, and which sites sent them. It gives a clan no data about one person.
6. Cookies
The site sets two cookies. Both are strictly necessary and neither is a tracker. The first keeps you signed in. The second lasts for the few seconds of a sign-in through Discord, and then it goes. The scripts on the page cannot read the session cookie.
The site sets no other cookie. If the operator adds a cookie that is not strictly necessary, the banner asks you first. Your browser holds your answer. The server does not.
7. Third-party services
No third-party analytics service, advertising service or profiling service operates on this site. The count above is the site's own, and its data stays on the same server as everything else. Only the companies that carry or store the traffic have a part in it. The sections below name them.
8. If you sign in
A sign-in goes through Discord and asks for the identify scope only. The site keeps your Discord account id, your display name and your avatar hash. It does not ask for or store an email address, a password or a list of servers.
A sign-in writes one session row and one cookie. The scripts on the page cannot read that cookie. The session lasts 30 days and then ends. A sign-out deletes the row.
9. If you apply for a clan
An application keeps your text and the one screenshot that you sent. The site serves the screenshot to administrators only and caches it never. The site deletes the screenshot when an administrator decides the application.
The site keeps the decision and its reason. The site announces a new application in its own staff channel on Discord.
10. If you post on the forums
The site stores your post as you wrote it, and the post is public. If a moderator removes a post, the site hides the words and keeps the row, because a moderator can put the post back. The page shows the reason for the removal. It does not show the name of the moderator.
The site stores a vote against your account, so that you can change or withdraw it. The site announces your report in its own staff channel on Discord, without your name.
11. How the site uses the information
The site uses it for these operations and for no other operation.
To keep you signed in and to show you what belongs to you.
To show what you published: a clan page, a thread, a post, a count of votes.
To decide an application, and to tell you the decision and its reason.
To moderate the text that people write, and to apply the terms.
To keep the site operational, to find a fault, and to see an attack.
To tell a clan how many people read its page, and to tell the operator how many people read the site.
To answer you when you write to the operator.
12. Who else your browser speaks to
Cloudflare is in front of each request to this site. It sees the address that you asked for and the address that you asked from.
Your browser gets avatars from the Discord CDN and item icons from the Iron Foundry API. Each of the two sees a request from you. The site sends neither of them data about you.
13. Who the site speaks to for you
The server reads clan statistics from Wise Old Man on a schedule. Your browser does not read them, and the server does not read them when you visit. The site speaks to Discord one time when you sign in. After that it speaks to Discord only to announce a new application or a new report to the staff.
14. Where the site stores and processes the data
One database on one server in Stockholm, Sweden, behind Cloudflare. The site stores uploaded artwork as files beside that database. Sweden is in the European Union, thus the GDPR applies to all of this data.
The site encrypts the nightly backup before the backup leaves the server, and then copies it to Cloudflare R2 object storage. Only the person who operates the site holds the key that opens a backup.
15. How long the site keeps the data
The site applies each of these times.
A session: 30 days, or until you sign out.
An application screenshot: until an administrator decides the application. Then the site deletes it.
A data export that you asked for: one week. Then the site deletes it.
An account erasure, a clan erasure or a board erasure that you armed: 30 days, in which you can cancel it. Then the site deletes everything that it covers, permanently.
Backups: the site removes the nightly dumps on the server after one week. The copies in object storage end on the schedule of the bucket.
Request logs: 14 days.
A page view, with the number that names a visitor for its day: 30 days. Then the site deletes it. The totals of each day stay, and they name nobody.
Your account, your clan page and your posts: for as long as you keep them, and no longer.
16. Your rights under the GDPR
The GDPR gives you the rights below over the data that the site holds about you. This site is built to give you these rights, not to argue about them.
Each person who uses the site has these rights, in each country and with each passport. The site does not examine the origin of a request before it answers the request. The site keeps no second, smaller set of rights for any person.
Access: you can ask which data the site holds about you. Your account page makes a full export, with one file for each table. You do not have to ask a person for it.
Rectification: you can correct data that is wrong. You can change almost all of the data that the site holds, on the page that shows it.
Erasure: you can have your data deleted. Your account page arms an erasure and gives you 30 days to cancel it.
Restriction: you can ask the operator to stop processing while a dispute continues.
Portability: you can move your data to a different service. The export is machine-readable JSON for this purpose.
Objection: you can object to processing that the operator does for a legitimate interest.
Withdrawal of consent: you can withdraw an agreement that you gave. The withdrawal does not make the earlier processing unlawful.
Complaint: if this answer does not satisfy you, you can make a complaint to a data protection authority. Use the authority of your own country. If your country has no authority, use the Swedish authority, because the operator runs the site in Sweden.
17. How to use these rights
Access, rectification, erasure and portability are buttons on your own account page. For each of the four, you do not have to send a request. For all other rights, write to the address in the contact section below.
The operator answers a written request in one month. If a request is complex and needs more time, the operator tells you inside that month. Such a request can then need two more months.
Two items continue after an erasure. The confirmation says this before you arm the erasure. A forum post keeps its words, and the site removes your name from it. A ban stays attached to the Discord id, thus an erasure is not a method to remove a ban.
18. The privacy policies of other companies
Three companies have a part in serving this site. Each has its own policy. Read them.
Discord, for a sign-in and for avatars: discord.com/privacy
Cloudflare, which carries each request and holds the backups: cloudflare.com/privacypolicy
Wise Old Man, which the server asks for clan statistics: wiseoldman.net
19. Contact
Send an email to contact@osrsclans.cc, or send a message to "Saltis." on Discord. The full stop is a part of the name. Send a data request and a privacy question to the same address as all other subjects, because there is one person here.