Privacy Policy

Last updated: May 17, 2026

This Privacy Policy explains how ClanVault ("we", "us", "our") collects, uses, and protects your information when you use our Service at clanvault.io. We take your privacy seriously and will never sell your data.

ClanVault is not affiliated with Jagex Ltd. RuneScape is a registered trademark of Jagex Ltd.

Account & Identity

• Email address (if you register with email/password)
• Discord ID, username, and avatar (if you sign in with Discord)
• Your RuneScape Name (RSN) and display name (you provide these voluntarily)

Clan Activity

• Events you create, sign up for, or attend
• Loot drops and boss kills you log
• Citadel cap records and clan points
• RuneCoffer donation amounts

Discord Bot Activity

• Aggregated message counts and voice minutes per day (for activity tracking — no message content is ever read or stored)
• Verification requests you submit through the bot
• Moderation actions applied to your account

• The content of your Discord messages — ever
• Payment information (Ko-fi handles donations independently)
• Your real name, address, or phone number
• Data from third-party websites or apps outside of ClanVault

• To create and manage your account and clan memberships
• To display your profile, rank, points, and drops to your clan members
• To power Discord bot slash commands and the verification flow
• To send transactional emails (e.g. citadel cap reminders, application updates)
• To show aggregated activity stats to clan owners
• To maintain platform security and prevent abuse

We do not use your data for advertising, profiling, or any purpose beyond operating ClanVault.

• Your clan members can see your RSN, rank, points, and drops you have logged
• Clan owners can see verification requests, member lists, and activity stats for their clan
• The public can see clan discovery listings — individual member profiles are not publicly accessible by default
• ClanVault staff may access data as necessary to resolve support requests or investigate abuse

Your data is stored securely using the following infrastructure:

• Supabase — database and authentication, hosted on AWS (SOC 2 Type II compliant)
• Vercel — web hosting and serverless functions (SOC 2 compliant)
• Resend — transactional email delivery

We use HTTPS for all data in transit, and access to production data is strictly limited. However, no system is 100% secure and we cannot guarantee absolute security.

• You can delete your account at any time from Account Settings
• When you leave a clan, your activity data is removed from that clan's records
• Clan owners can delete their entire clan and all associated data from Clan Settings
• Upon account deletion, your personal data is removed within 30 days
• Some anonymised, aggregated data (e.g. total drops logged) may be retained for platform statistics

We use only essential cookies required for authentication — specifically Supabase session tokens that keep you logged in. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. You can clear these at any time by signing out or clearing your browser storage.

ClanVault integrates with the following third-party services. Each has its own privacy policy:

• Supabase — supabase.com/privacy
• Vercel — vercel.com/legal/privacy-policy
• Discord — OAuth sign-in only — discord.com/privacy
• Resend — transactional email — resend.com/privacy
• pricecheck.gg — RS3 item price lookups (no personal data is sent)

ClanVault is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account without parental consent, please contact us at privacy@clanvault.io and we will remove the account promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and announce significant changes in our Discord server. Continued use of the Service after changes are posted constitutes your acceptance of the revised Policy.

Depending on where you are located, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing of your data

For privacy questions or data requests, contact us at privacy@clanvault.io or in our Discord server. For general support, reach us at support@clanvault.io.