Privacy Policy

Short version: there are no accounts, nothing is sold, and your collection file is read in your own browser.

Last updated July 2026

Your collection file never gets uploaded on its own

When you drop a RuneLite backup file onto this site, it is decoded entirely inside your browser. The file is not sent anywhere as part of loading it. If you close the tab without clicking save, nothing about your collection ever reaches a server.

What gets stored when you click save

Saving is opt in. It only happens when you press the save button to generate a shareable link. At that point the following is written to our database:

  • Your RuneScape name, taken from the card data in the file
  • A URL slug based on that name
  • Your credit total and number of packs opened
  • The list of cards you own, including foil status
  • The original encoded collection string

Saved collections are public. Anyone with the link can view yours, and the page is readable without logging in because there is no login. Do not save a collection if you would rather your RuneScape name not be publicly associated with it.

What we never collect

No email addresses, no passwords, no accounts, no payment details. We never ask for your RuneScape login and you should never give it to any fan site, including this one.

Third parties

  • Supabase stores saved collections
  • Card images are hosted by the OSRS Wiki and loaded through an image proxy, so those services see requests for the images your browser displays
  • The site is hosted on Vercel, which keeps standard server logs that include IP addresses

There is no analytics on this site. Nothing tracks which pages you visit.

Getting your collection removed

Ask in the Discord and it will be deleted. There is no account system, so this is handled by hand rather than through a settings page.

Join the Discord to request removal

Changes

If this policy changes in a way that affects what is stored, the date at the top of this page changes with it.