RuneSync privacy notice
RuneSync is a free RuneScape 3 plugin. This is what it sends, where it goes, and how to remove it. Last updated October 2026.
What RuneSync is
RuneSync sends some of your own RuneScape activity to RuneClan Bot, a Discord bot your clan uses, so your clan's events and points can count it automatically. It needs the RuneLink plugin, which links your character to your Discord account.
What is sent, only if you switch it on
Every kind starts switched off. You choose on your RuneClan Bot profile (Plugin tab) or in RuneSync's settings panel in the game.
- Skill XP: your XP total and level in each skill.
- Drops: items you receive from monsters you kill (item, quantity) and the monster they came from. RuneClan Bot adds a price from the Grand Exchange guide.
- Boss kills: the boss name and your kill count, read from your own game message “Your … kill count is”.
- Achievements: your clue scroll completions (tier and count), read from your own game message.
With each upload: your RuneScape name, RuneSync's version, and a signed proof from RuneLink that this name is linked to your Discord account. Each report has an id; if you allowed the optional tracking permission, that id includes a short code made from the game's tracking number for your character (it can't be turned back into the number, and the number itself is never sent). When RuneSync checks your settings it also says its version and whether you paused it, so your profile can show that.
If your clan allows the in-game clan panel and you switch it on in RuneSync, RuneSync asks RuneClan Bot for your clan's open events and your own points and progress while the panel is open. That request sends nothing beyond the signed proof above.
Kill counts and clues need the optional chat permission. RuneSync only reads your own game messages, never clan, friends or public chat, and only the boss name, kill count, clue tier and count leave the game. Chat text is never sent.
What is not sent
Passwords, chat text, other players (nothing about anyone else is ever sent), your location, your bank or inventory.
Bug reports
If you press “Get diagnostics id” in RuneSync's panel, it sends a snapshot of the plugin's own state: its version, your switches, whether it is paused, how many reports are waiting, the results of the last 20 uploads and which permissions are granted. No proof of your link, no name, no chat and none of what you reported. RuneClan Bot stores it with your Discord account id, so it knows whose report it is. You get a short id to put in a bug report. Snapshots are deleted after 14 days.
Why, and on what basis
RuneSync's reports are used for your clan's events (bingo tiles, boss nights, competitions), its points, and your ownRuneClan Bot profile. The legal basis is your consent: each kind is off until you switch it on, and you can switch it off again at any time. Switching off stops new reports; what was already sent stays until you delete it or it expires.
Where it goes
To RuneClan Bot's servers, hosted by Railway in the United States (US West). The United States is not a UK-adequate country. Your data is protected by encrypted connections (HTTPS), access limited to the person who runs RuneClan Bot, and automatic deletion. Railway stores it for RuneClan Bot as its hosting provider. It is not sold or shared with anyone else.
Who sees it
- You see everything RuneSync sent about you on your RuneClan Bot profile (Plugin tab).
- Your clan sees what its events and points use: progress on event tiles, kills counted in a boss night, points awarded.
- The person who runs RuneClan Bot can open your bug-report snapshots by their id, to help with a bug report.
How long it is kept
- Raw reports are deleted after 180 days.
- Points and event results that came from them stay with your clan's event history.
- Bug-report snapshots are deleted after 14 days.
Your choices
- See and delete everything RuneSync sent on your RuneClan Bot profile (Plugin tab, “Delete everything the plugin sent”).
- Switch any kind off at any time, on the website or in the game. Pause sending in the game for one character.
- Remove the plugin. Nothing is sent while it is not running.
You can also ask for a copy of your data, or for it to be corrected or deleted, at the address below. If you are unhappy with how it is handled, you can complain to the UK Information Commissioner's Office (ico.org.uk).
Who is responsible: [name of the person who runs RuneClan Bot, to be added before release], who runs RuneClan Bot.
Contact: [contact email to be added before release]