Privacy Policy

Effective: April 1, 2026 · Last updated: April 1, 2026

Rigour Hero ("the Game", "we", "us") is a free, non-commercial fan game inspired by Old School RuneScape. This policy explains what data we collect, why, how we store it, and your rights regarding that data.

1. Data We Collect

1.1 Account Data

• RuneScape Name (RSN) — used as your in-game identity. Verified against the official OSRS Hiscores API.
• Account password — optional, set by the player. Stored as a one-way cryptographic hash on our server. We never store or see your plaintext password.
• Account type — Ironman, Hardcore Ironman, Ultimate Ironman, or regular. Retrieved from OSRS Hiscores.

1.2 Gameplay Data

• Scores, combos, and game statistics — submitted when you complete a game session.
• Collection log items and pets — earned through gameplay, stored per-RSN.
• Inventory, consumables, and GP balance — virtual in-game currency and items with no real-world value.
• Game mode and boss selections.
• Star ratings — optional boss/mode ratings you submit.

1.3 Social Data

• Friends list, follow list, and ignore list — managed by you through in-game commands.
• Chat messages — public chat messages sent in-game are broadcast to other connected players but are not stored on our server.
• Private messages — stored server-side with a rolling cap of 50 messages per player to provide message history when you reconnect. Older messages are automatically deleted as new ones arrive.
• Channel/clan membership — which channels you have joined.
• PM privacy settings — your preference for who can send you private messages.

1.4 Discord Linking (Optional)

• If you use the /link command in our Discord server, we store your Discord user ID and tag alongside your RSN. This is voluntary and can be unlinked.

1.5 Technical Data

• IP address — used solely for rate limiting and abuse prevention. IP addresses are held in server memory and are not written to disk or logs. They are discarded when the server restarts.
• WebSocket connection state — used to track online status and deliver real-time updates. No connection metadata is stored permanently.

1.6 Client-Side Storage (Your Browser)

We use your browser's localStorage to remember your preferences locally on your device:

• RSN, selected boss and mode, quick prayer choice
• Sound/music volume and mute preferences
• HUD element positions (if you've moved them)
• UI preferences (timestamps, keyboard mode, activity feed, etc.)
• Session authentication token
• Cached collection log data

This data never leaves your device. You can clear it at any time through your browser settings.

2. What We Do NOT Collect

• Email addresses
• Real names or physical addresses
• Payment or financial information (the Game is entirely free)
• Cookies or third-party tracking
• Analytics or advertising data
• Your actual RuneScape account credentials

3. How We Use Your Data

We do not sell, share, or disclose your data to any third party. We do not use your data for advertising, profiling, or any purpose beyond operating the Game.

4. Data Retention

• Account and gameplay data — retained for as long as you have an account. If you request deletion, all data associated with your RSN is permanently removed.
• Private messages — rolling cap of 50 per player. Older messages are automatically overwritten.
• IP addresses — held in memory only. Automatically purged every 5 minutes (rate limits) or on server restart.
• Discord links — retained until you unlink or request deletion.

5. Data Security

• All connections to rigourhero.com use HTTPS/TLS encryption.
• WebSocket connections use WSS (encrypted WebSocket).
• Passwords are stored as one-way cryptographic hashes. We cannot recover your password — only you can reset it.
• Server access is restricted and protected by SSH key authentication and firewall rules.
• Rate limiting and lockout mechanisms protect against brute-force attacks.

6. Your Rights

Regardless of where you live, you have the right to:

• Access — request a copy of all data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request permanent deletion of all data associated with your RSN. This includes scores, stats, inventory, friends, messages, and any other stored data.
• Data portability — request your data in a machine-readable format.

To exercise any of these rights, contact us through our Discord server or reach out to the site operator directly.

We will process deletion requests within 30 days. Deletion is permanent and irreversible — your leaderboard entries, stats, pets, inventory, and all social data will be removed.

7. Children's Privacy

Rigour Hero is not intended for children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you are a parent or guardian and believe your child has provided data to us, please contact us and we will promptly delete it.

8. Third-Party Services

We interact with the following third-party services:

• OSRS Hiscores API (Jagex) — to verify RSN existence and account type. We send only the RSN; Jagex's own privacy policy governs their handling of that request.
• TempleOSRS API — to retrieve boss kill counts for profile display. We send only the RSN.
• Discord — if you use our Discord bot, Discord's privacy policy applies to data processed by Discord.

9. Changes to This Policy

We may update this policy as features change. The "last updated" date at the top will reflect the most recent revision. Continued use of the Game after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, reach us through:

• Discord: Rigour Hero Discord