Privacy Policy

1. Data We Collect

We collect the following categories of information:

• Discord profile data: username, avatar, and Discord user ID, collected when you sign in via Discord OAuth.
• OSRS game data: skill levels, boss kill counts, quest completions, achievement diaries, collection log entries, bank items, and other in-game metrics transmitted by the RuneLite plugin.
• Screenshots: in-game screenshots captured and uploaded by the RuneLite plugin.
• IP address: collected by Stripe during payment processing for billing and fraud prevention purposes only. ClanHub does not store your IP address independently.
• Clan membership and activity: clan associations, roles, competition participation, point totals, and rank progression.

2. How Data Is Collected

• Discord OAuth: when you sign in, Discord provides us with your public profile information.
• RuneLite plugin: game data is sent from the ClanHub RuneLite plugin installed on your client. The plugin only transmits data while it is active and you are logged into an OSRS account linked to a clan.
• Wise Old Man API: we may fetch supplementary stats from the Wise Old Man public API to enrich your profile data.

3. Where Data Is Stored

Your data is processed and stored using the following services:

• Neon Postgres: primary database for all account, clan, and game data.
• Cloudflare R2: object storage for screenshots.
• Cloudflare Workers: serverless compute for API processing, queue consumers, and the web application.

4. Third-Party Services

We share data with the following third parties as necessary:

• Discord: authentication via OAuth and bot notifications to your clan's Discord server.
• Stripe: payment processing for Premium subscriptions. Stripe collects billing information directly; we do not store credit card numbers.
• Wise Old Man: supplementary OSRS stat lookups.
• Cloudflare: hosting, CDN, storage, and edge compute infrastructure.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated personal data will be removed from our systems. Aggregated or anonymized data that cannot identify you may be retained for analytics purposes.

6. Your Rights

You have the right to:

• Opt out of public display: you can hide your profile from public clan pages.
• Request full data deletion: we will delete all data associated with your account upon request.
• Data portability: the ability to export your data is planned for a future release.

7. How to Exercise Your Rights

You can manage your privacy preferences, opt out of public display, and request full data deletion from your Account Settings. For other privacy inquiries, contact us at privacy@clanhub.gg.

8. Cookies and Local Storage

ClanHub does not use cookies. Authentication tokens are stored in browser memory only and are cleared when you close the tab. A single localStorage item is used for session persistence across page reloads. No third-party tracking cookies or analytics scripts are loaded.

9. Children

ClanHub is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at privacy@clanhub.gg and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of ClanHub after changes constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or requests, email us at privacy@clanhub.gg.