Privacy Policy

Draft — pending human/legal review before launch. Not final legal advice.

Last updated: 2026-07-01. Unofficial fan project. Not affiliated with, endorsed by, or sponsored by Jagex.

What we collect

• Your Discord account id and email address (via Discord login).
• Your OSRS account hash (a non-reversible numeric identifier) and in-game display name, once you link the plugin.
• Gameplay event metadata you generate (which activity triggered a drop, item ids for skilling drops, timestamps) — used to award packs and detect abuse.
• Your collection, packs, and trade history within LootDeck.

Why we collect it

To run the game: authenticate you, award and open packs, enable trading, and prevent cheating. We do not sell your data.

Third parties

We host on Railway (infrastructure) and use Discord for login. Your data is processed by these providers only to operate the service.

Retention

We keep your data while your account exists. Deleting your account removes your personal data (see below).

Your rights

You can export or delete all of your data at any time from Settings. For any privacy question, contact us via our Discord.