Privacy Policy

Gemstone Crab KC ("we", "us", or "the site") is a free, fan-made Old School RuneScape leaderboard. This policy explains what information we handle when you use the site and the choices you have. We keep data collection to the minimum needed to run the leaderboard.

Information we collect

• Account information. When you register, our authentication provider stores your email address, an encrypted password, and the display name you choose for the leaderboard.
• Kill count submissions. When you submit a score we store your kill count, your in-game RuneScape name, your account type (main, ironman, or hardcore ironman), and the proof screenshot you upload.
• Contact messages. If you use our contact form, we store the name, email, and message you provide so we can reply.
• Usage data. We use privacy-conscious analytics to understand aggregate traffic (pages visited, approximate region, device type). This is not used to identify you personally.

How we use your information

• To display the public leaderboard and verify submitted kill counts.
• To authenticate your account and send account-related emails.
• To respond to your messages and moderation requests.
• To detect abuse, fraudulent submissions, and keep the site secure.
• To measure aggregate traffic and improve the site.

What is public

By submitting a score you understand that your chosen display name, account type, kill count, and approved proof screenshot are shown publicly on the leaderboard. Please do not include personal information in your screenshots or display name that you do not wish to be public.

Service providers

We rely on trusted third parties to operate the site. These providers only process data on our behalf:

• Supabase for authentication, database, and screenshot storage.
• Vercel for website hosting and privacy-friendly analytics.
• Google Analytics for aggregate traffic measurement.
• Resend for delivery of account and password emails.
• Discord for internal admin notifications of new submissions and messages.

Cookies

We use essential cookies to keep you signed in and analytics cookies to measure aggregate usage. You can block cookies in your browser settings, though signing in may not work without essential cookies.

Data retention & deletion

We keep your data for as long as your account is active. You can request deletion of your account and associated submissions at any time by contacting us. When an account is deleted, its profile, submissions, and stored screenshots are permanently removed.

Children

The site is not directed to children under 13. If you believe a child has provided us information, please contact us and we will remove it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "last updated" date above.