At RuneSpin, we value your privacy and aim to be 100% transparent about how we handle your data. We are a tool built for players, and your trust is our highest priority. We do not sell your data, and we do not use tracking or marketing cookies.

1. Information We Collect

We process data based on Contractual Necessity (to provide the service you signed up for) and Legitimate Interest (to keep our site secure). We collect:

• Email Address: When you log in via our One-Time Password (OTP) system, we store your email address to identify your account and save your progress.
• Discord Data: If you choose to authenticate or link your account via Discord, we securely collect your Discord ID, Discord Username, and the email address associated with your Discord account to create and manage your profile.
• Game Data: We collect public hiscore data (levels, boss kills, quest counts) from the official RuneScape hiscores and RuneMetrics to track your challenge and dueling progress.
• Technical Logs: Our server logs your IP address and browser type strictly for security purposes and to prevent brute-force attacks.

2. Virtual Currency & Dueling

RuneSpin features a dueling system where users can "wager" virtual coins against one another. Please note:

• These coins hold absolutely no real-world monetary value.
• Coins cannot be purchased with real money, traded for real-world currency, or cashed out under any circumstances.
• All coins are generated exclusively by playing RuneSpin, completing challenges, and participating in the site's ecosystem. The dueling system exists purely for entertainment and competitive ranking purposes.

3. Cookie Disclosure

We use exactly one "strictly necessary" cookie to function:

• PHPSESSID: This is a first-party functional cookie used to keep you logged in and secure your session. If you select "Stay Logged In" during the login process, this cookie persists for 30 days to save you from re-verifying your email. Otherwise, it expires when you close your browser.

4. Third-Party Services & Infrastructure

We do not share, sell, or rent your personal information with any third-party advertisers or data brokers. However, we do use trusted essential service providers to make the website function:

• Pusher (Real-Time Notifications): We use Pusher to provide live, real-time updates for the Live Arena, dueling progress, and site notifications. To deliver these instant updates, your browser establishes a secure websocket connection directly with Pusher. During this process, Pusher may temporarily process your IP address and connection metadata. We only transmit public game data and internal user IDs through these channels; we never send your email address or private authentication data through Pusher.
• Database & Hosting: Your data is stored securely on our private servers and is used solely for the functionality of this application.

5. Your Rights & Data Deletion

You have the right to access, export, or delete your personal data at any time. If you wish to close your account, unlink your Discord, and have your email address and all associated character profiles permanently removed from our database, please contact us:

• Email: admin@runespin.org

Requests are typically processed within 48-72 hours. Once deleted, your data cannot be recovered.

6. Age Restriction

RuneSpin is intended for users aged 13 and older. We do not knowingly collect or maintain personal information from children under the age of 13. If we learn that a user under 13 has provided us with personal information, we will take steps to delete that information as quickly as possible.