Privacy Policy

ScapePathis an independent Old School RuneScape (“OSRS”) progression companion that helps players decide what to do next. This policy applies to the ScapePath website and its features. ScapePath is not affiliated with, endorsed by, or sponsored by Jagex Ltd. Much of the site — guides, boss, skill, quest and money-making pages — is fully public and can be read without an account or any personal data.

We keep data collection deliberately narrow. Depending on how you use the site, it may include:

• Account information.If you create an account, the email address associated with your sign-in and a display name. Sign-in is handled by Supabase (see “Services we rely on”).
• Authentication data. Session cookies set by Supabase to keep you signed in. These are strictly necessary — without them you cannot stay logged in.
• Linked OSRS data.If you link a character by RuneScape name (“RSN”) and account type, we read your public skill levels, experience and boss/activity scores from the official OSRS Hiscores and store snapshots of them, so your dashboard, recommendations and progress-over-time work.
• Content you create. Goals and progress check-ins, planner setups, owned gear, event participation, community memberships and community goals, friend connections, notifications, and any profile identity, bio or avatar you choose to add.
• Contact submissions. The topic and message you send through our contact form, and a reply email address if you provide one.
• Usage and technical data. Aggregate, privacy-friendly analytics about page views and general device/browser type, collected via Vercel Analytics. This is measured without cookies and is not used to identify you or track you across other sites.

We never ask for, and you should never send us, your Jagex/RuneScape password, financial or payment details, or other sensitive personal information. Linking a character requires only your public RSN.

• To sign you in and keep your session secure.
• To generate personalized progression plans, recommendations and dashboards from your linked stats.
• To display your OSRS stats and track your progress over time.
• To operate features you opt into — goals, planner, communities, friends and Skill of the Month events.
• To respond to messages you send us.
• To understand aggregate usage so we can improve the site.
• Once advertising is active (see below), to show and measure ads that keep ScapePath free.

ScapePath plans to fund itself with advertising and has integrated Google AdSense. AdSense approval is pending, and ads are not currently being served on ScapePath.This section describes what will happen once advertising becomes active — we’ve written it in advance so the disclosure is ready, not because ads are running today.

When advertising is active:

• Google and its advertising partners may use cookies and read device identifiers to serve and measure ads, including based on your prior visits to this and other websites.
• Visitors in the EEA, the UK and Switzerland will be shown a consent choice, through Google’s certified consent management, before any personalized advertising cookies are used.
• You will be able to opt out of personalized advertising at Google Ads Settings and manage other vendors at aboutads.info. Google’s handling of data on partner sites is described in its partner-sites policy.

We will update this policy’s “Last updated” date when advertising goes live.

ScapePath uses only a small set of cookies and browser-storage keys. Our Cookie Policy lists each one, but in short:

• Strictly necessary— Supabase session cookies that keep you signed in and secure. The site can’t offer a logged-in experience without them.
• Preferences— small values kept in your browser’s local storage, such as your light/dark theme and an anonymous planner draft. These stay on your device; for signed-out visitors they are never sent to us.
• Analytics — Vercel Analytics, which measures traffic without cookies.
• Advertising — set by Google only once advertising is active, and subject to the consent step described above.

Most browsers let you block or delete cookies and clear local storage; note that blocking strictly necessary cookies will break sign-in.

We share the minimum data required for these providers to run the service on our behalf. Each has its own privacy policy:

• Supabase — sign-in and database hosting for your account, linked profile and saved content.
• Vercel — website hosting and privacy-friendly, cookieless Vercel Analytics.
• OSRS Hiscores (Jagex) — the source of the public character data you choose to link. We read from it; we never send it your data.
• Google AdSense — advertising, once it is active on the site (see above). Not currently serving ads.

We keep your account, linked-profile snapshots and saved content for as long as your account is active, so features like progress tracking stay useful. ScapePathdoes not currently run automated deletion — instead, you can ask us to remove your data and we will (see “Your rights and choices”). Contact-form messages are kept only as long as needed to handle your request. Anonymous preferences (theme, planner draft) live in your browser until you clear them.

• Update your profile. You can change your display name, identity, bio and avatar in your profile at any time.
• Change your linked character. You can update the linked RSN in your profile whenever you like.
• Access, correction and deletion. You can request a copy of the data we hold, ask us to correct it, or ask us to delete your account, your saved data, or a linked RSN. We handle these by request — ScapePath does not yet offer one-click deletion in the interface.
• Advertising and cookie controls. Manage ad personalization through Google Ads Settings once ads are active, and control cookies and local storage through your browser at any time.

Depending on where you live — including the EEA, the UK, Switzerland and Canada — you may have additional rights over your personal data, such as access, correction, deletion and objection. You can exercise any of these, or ask a question, through our contact page using the “Privacy request” topic.

Our providers (Supabase and Vercel) may process and store data on servers outside your country. Where required, we rely on those providers’ safeguards for international transfers, described in their own privacy policies.

ScapePath is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will remove it.

We may update this policy as the site evolves or as legal requirements change. When we do, we will revise the “Last updated” date above, and significant changes will be made clear on this page.

Questions about this policy or your data? Reach us through our contact page.