Privacy
Last updated October 2026
RSpill is a hobby project run by one person. This page says what it stores and what it does not, in the order you would want to know it.
What it stores about you
- Your email address, because sign-in works by emailing you a link. There is no password.
- A display name, if you set one.
- Your cash stack, the RuneScape names you choose to track, the flips you log and the price alerts you create.
- A session cookie so you stay signed in.
There is no analytics script, no advertising, no tracking pixel and no third-party JavaScript of any kind. Fonts are served from this domain rather than from Google, so loading a page does not tell anyone else that you visited.
What it does not do
- It never asks for your RuneScape password, and it could not use one. Nothing here connects to the game, reads your client or automates anything.
- It does not sell or share your data. There is nobody to sell it to.
- It does not build a profile of you or track you across other sites.
Where the game data comes from
Two public sources. Neither is told anything about you — tracking a name reads a public page about that name, the same as looking it up yourself.
| OSRS Wiki real-time prices | Grand Exchange prices and trade volumes for every item Public data, identical for every visitor. Nothing about you is sent. |
|---|---|
| Old School RuneScape hiscores | Skill levels, experience and ranks for names you choose to track Public data, read by name. No game login is involved, and nothing about you is sent to Jagex. |
Hiscores are public, so a name you track is readable by anyone whether or not this site exists. If you would rather it were not stored here, remove the account and its snapshots go with it.
Cookies
One, and it is strictly necessary, which is why there is no consent banner. Nothing here sets a cookie for advertising or analytics.
| Cookie | Purpose | Life |
|---|---|---|
| Session cookie | Keeps you signed in after you click a magic link | Until you sign out, or 30 days |
Who else touches it
| Service | Role | What they see |
|---|---|---|
| OVHcloud | Hosting | Everything — the server this runs on |
| Resend | Email delivery | Email address and message content for sign-in links and price alerts |
| Backblaze B2 | Encrypted off-site backups | Encrypted copies of the database |
| Cloudflare | DNS only | Domain lookups. Traffic is not proxied through Cloudflare |
How long it is kept
- Your account and its contents: until you delete it.
- Grand Exchange price history: 90 days, then deleted. This is market data rather than anything about you.
- Encrypted backups: rolling, and a deletion takes up to 30 days to age out of them.
Deleting your account
Email hello@rspill.com and it will be deleted, along with your tracked accounts, snapshots, flips and alerts. A self-service button is on the list; until it exists, the email reaches one person and gets done.
Contact
RSpill, Texas, United States — hello@rspill.com.