# Privacy Policy Canonical page: https://runelist.io/privacy/ Last updated: 24 September 2026 Version: 6 Policy Text **What information do we collect?** - We collect information from you when you register on the site, place an order, enter a contest or sweepstakes, respond to a survey or communication such as e-mail, or participate in another site feature. - When ordering or registering, we may ask you for your name, e-mail address, mailing address, phone number, credit card information or other information. You may, however, visit our site anonymously. - We also collect information about gift recipients so that we can fulfill the gift purchase. The information we collect about gift recipients is not used for marketing purposes. - Like many websites, we use "cookies" to enhance your experience and gather information about visitors and visits to our websites. Please refer to the "Do we use 'cookies'?" section below for information about cookies and how we use them. **How do we use your information?** We may use the information we collect from you when you register, purchase products, enter a contest or promotion, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways: - To personalize your site experience and to allow us to deliver the type of content and product offerings in which you are most interested. - To allow us to better service you in responding to your customer service requests. - To quickly process your transactions. - To administer a contest, promotion, survey or other site feature. - If you have opted-in to receive our e-mail newsletter, we may send you periodic e-mails. If you would no longer like to receive promotional e-mail from us, please refer to the "How can you opt-out, remove or modify information you have provided to us?" section below. If you have not opted-in to receive e-mail newsletters, you will not receive these e-mails. Visitors who register or participate in other site features such as marketing programs and 'members-only' content will be given a choice whether they would like to be on our e-mail list and receive e-mail communications from us. **How do we protect visitor information?** We implement a variety of security measures to maintain the safety of your personal information. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. When you place orders or access your personal information, we offer the use of a secure server. All sensitive/credit information you supply is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our databases to be only accessed as stated above. **Do we use "cookies"?** Yes. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your Web browser (if you allow) that enables the site's or service provider's systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. We may contract with third-party service providers to assist us in better understanding our site visitors. These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business. You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser (like Netscape Navigator or Internet Explorer) settings. Each browser is a little different, so look at your browser Help menu to learn the correct way to modify your cookies. If you turn cookies off, you won't have access to many features that make your site experience more efficient and some of our services will not function properly. However, you can still place orders over the telephone by contacting customer service. **Do we disclose the information we collect to outside parties?** We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide you with advance notice, except as described below. The term "outside parties" does not include $(CompanyNameLegal). It also does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses. **How can you opt-out, remove or modify information you have provided to us?** To modify your e-mail subscriptions, please let us know by modifying your preferences in the "My Account" section. Please note that due to email production schedules you may receive any emails already in production. To delete all of your online account information from our database, sign into the "My Account" section of our site and remove your shipping addresses, billing addresses & payment information. Please note that we may maintain information about an individual sales transaction in order to service that transaction and for record keeping. **Third party links** In an attempt to provide you with increased value, we may include third party links on our site. These linked sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these linked sites (including if a specific link does not work). **Changes to our policy** If we decide to change our privacy policy, we will post those changes on this page. Policy changes will apply only to information collected after the date of the change. **This policy was last modified on October 16, 2020.** **Questions and feedback** We welcome your questions, comments, and concerns about privacy. Please send us any and all feedback pertaining to privacy, or any other issue. **Online Policy Only** This online privacy policy applies only to information collected through our website and not to information collected offline. **Terms and Conditions** Please also visit our [Terms and Conditions](https://runelist.io/terms-conditions/) section establishing the use, disclaimers, and limitations of liability governing the use of our website. **Your consent** By using our site, you consent to our privacy policy.   ## RuneTrack referral links Server owners can make tracked links on RuneList of the form `runelist.io/go//` that forward to a page of their choosing. When you open one, RuneList records the time, your IP address, the country it belongs to, the page you came from, your browser and device type, and whether the request looks like a bot or a link preview. Unlike the rest of this site, these records are not shortened to a hash, because their purpose is to show the server owner where their players come from. The IP address is kept for 90 days and is then removed from the record. The rest of the record (the time, the country, the page you came from, your browser and device type, and whether it looks like a bot) is kept for as long as the listing exists, so the owner's history and totals stay. The server owner, and the people they have made managers of their listing, can see these records for their own links, including the IP address. RuneList uses the same records to tell the owner whether a click later led to a vote for that server on RuneList (looking seven days back and seven days forward from the click) and, when the owner's game reports the addresses of players who joined, whether a click led to a join. Game servers report only IP addresses and times; RuneList discards reports that match no click. If you do not want a click on such a link recorded, do not open it: the server's own listing on RuneList and its website are reachable without one. To have records about your address removed, contact us with the address and the approximate time. ## How long we keep IP addresses RuneList keeps IP addresses for 90 days and then removes them. This applies to the address of a vote (and, where a server put a player's address into its vote link, the address in the vote's name), the addresses in RuneVote records, the address of a sign-in and of each device you are signed in on, the address in our security log, and the address recorded when you accepted a policy. The record itself stays: that a vote was cast and counted, that a policy was accepted, when a security event happened. Only the address goes. When you vote, RuneList also sends your address to the server's vote callback, so that the server can spot abuse. What that server keeps is up to the server, not RuneList. ## Reviews If you write a review of a server, RuneList stores your rating, your text, when you wrote or changed it, and whether you had voted for that server. Once our team has approved it, it is shown under your display name and avatar. If you edit a review we keep the earlier versions, so that we can settle a dispute about what was written. To spot fake reviews our team compares reviews using data we already hold, such as the age of your account and the addresses you have signed in from. Only the names of the checks that raised a flag are stored with the review, never the addresses themselves. You can change or delete your own review at any time. If you delete your account, your reviews are not deleted: they stay on the server's page without your name or avatar, shown as "Former member", and nothing that identifies you stays with them. A review that had not been published yet is removed. To have a review taken down, for example because it exposes you, contact us. ## Analytics and browser storage We measure how the site is used with Google Analytics, Plausible and RuneList's own statistics. Before any page address or event is counted, we remove what could identify a player: the name in a vote link, IP addresses, email addresses, and sign-in, reset and payment codes. Staff pages, and the browsing of staff members once they have signed in, are left out of Google Analytics and Plausible. RuneList's own statistics count events such as a server page being viewed, a vote window being opened or a search finding nothing. Those are stored without your IP address and without any code made from it. Some records need to tell visitors apart, to count people rather than page loads and to spot abuse. For those we store a one-way code made from your IP address and a secret key. The same address always gives the same code, so it is a pseudonym, not an anonymous value. How long each copy is kept: - Votes and clicks on tracked links keep your IP address for 90 days, then it is removed. The code stays with the vote or the click for as long as that record exists. - Our visit statistics (page views, clicks on a server's website or Discord link, ad views), matched conversions and our server request log keep the code for 30 days. After that, a conversion keeps a number derived from the code so that it is not counted twice. - The check whether a tracked click led to a vote keeps the code for 60 days. - Clicks imported from the old RuneList site keep their code as part of that history. To know which websites send us visitors, the site remembers where the current browser tab came from (the referring website, or a campaign tag in the link) in your browser's session storage. It is removed when you close the tab, and it is sent along with a vote, a sign-up or an ad order. When a server tests two banners, your browser's local storage remembers which one you were shown, so you always see the same one. We use no cookies for any of this, and you can clear both from your browser's settings. For about one in ten page loads we also record how quickly the page loaded and responded: the kind of page (never its address), the timings, how the page was opened (for example a new visit, a reload or the back button) and whether the screen is phone or desktop sized. No IP address, code or page address is stored with these timings, and they are kept for 90 days.