Privacy Policy

What this policy covers

This policy explains how OSRS GE Watch handles information when you create an account, use account features, submit feedback, or access the service. Public Grand Exchange market data is not personal information.

Information we collect

• Account information, including your username, email address, password hash, account role, and email-verification status.
• Authentication and security information, including refresh-session records, token timestamps, request identifiers, IP addresses, user-agent information, and security logs.
• Information you choose to save, including favorite items and purchase records.
• Feedback you submit, including the title, description, optional contact email, and related item or page context.
• Operational information such as request logs, service errors, email-delivery results, and aggregate usage needed to secure and operate the service.

How we use information

• Provide accounts, favorites, purchase tracking, and other requested features.
• Verify email addresses, reset passwords, manage sessions, and prevent abuse.
• Operate, troubleshoot, measure, and improve the service and its alert system.
• Respond to feedback and support requests.
• Protect users, the service, and its infrastructure from fraud, attacks, and unauthorized access.

Cookies and sessions

The service uses a secure, HttpOnly refresh-token cookie to keep you signed in. The cookie is used for authentication and security, not advertising. Short-lived access credentials are kept in browser memory.

Service providers and disclosure

Information may be processed by infrastructure, email-delivery, logging, security, and backup providers used to operate OSRS GE Watch. Access is limited to what is needed to provide those services. Personal information is not sold to advertisers.

Information may also be disclosed when reasonably necessary to comply with law, enforce service rules, investigate abuse, or protect rights and safety.

Retention

Account data and user-saved records are retained while your account is active. Security, request, email-delivery, and operational records may be retained for shorter periods appropriate to troubleshooting and abuse prevention. Some records may remain temporarily in provider-managed backups until those backups expire.

Security

OSRS GE Watch uses measures such as password hashing, encrypted network connections, restricted cookies, token hashing, access controls, rate limits, and operational monitoring. No internet service can guarantee absolute security.

Your choices

You can update or remove favorites and purchase records from the application and sign out active sessions. Requests concerning account access, correction, export, or deletion can be submitted through the feedback form using the email address associated with the account. Identity verification may be required before a request is completed.

Changes

This policy may be updated as the service changes. The effective date on this page will be updated when material revisions are published.