Privacy Policy
Last updated 31 July 2026
The Codex is a free, fan-made RuneScape 3 stats site. This page explains exactly what it stores, why, and how to get it removed. In plain terms: it keeps public RuneScape stats so it can show you how they change over time, and — only if you sign in — the small amount of Discord information needed to know an account is yours.
Public RuneScape data
When anyone looks up a player, The Codex reads that account's public profile from Jagex's RuneMetrics API — the same information anyone can see on the official hiscores. It then re-checks looked-up accounts periodically and stores snapshots of those public stats.
Those snapshots are the product: gains, charts, streaks, milestone dates and the drops log can only exist by comparing today's public numbers with earlier ones. The Codex does not have, ask for, or want your Jagex login, email, password, bank, or anything private. If an account's RuneMetrics profile is set to private, The Codex simply can't see it.
Stored per tracked player: daily stat snapshots, notable drops parsed from the public activity feed, milestone dates, last-known hiscore rank, and community-supplied clan name.
If you sign in with Discord
Signing in is optional. Everything except goals, rivalries and notifications works without it. When you do sign in, The Codex stores:
- Your Discord user ID (a number), and the username/avatar Discord returns for display.
- Which RuneScape accounts you have claimed, and whether each claim is verified.
- Any goals and the rival you pin, against the accounts you own.
- If you set up notifications: either your Discord user ID (for DMs) or the webhook URL you provide, plus which alerts you chose.
The Codex requests only the minimum Discord scopes needed to identify you. It cannot read your messages, your servers' contents, or anything else in your account.
Site analytics
The Codex records page visits to see what's being used. This is deliberately coarse: it stores the page path, a rough location (city/country, from the hosting provider's edge headers), a browser name, and a short pseudonymous visitor ID that is re-derived daily and cannot be reversed or linked across days. Your IP address is used only in the moment, to rate-limit abuse and derive that daily ID — it is never stored. Daily rollups self-delete after 40 days.
The site is hosted on Vercel and uses Vercel Web Analytics and Speed Insights, which collect aggregate, cookie-free performance and traffic data. Uncaught JavaScript errors are logged (message, page, browser) for up to 30 days so breakage can be fixed.
Stored in your browser, not on our servers
Favourites, recently-viewed players, your pinned primary account and a few interface preferences are kept in your browser's local storage. Clearing your browser data removes them. Sign-in uses a session cookie; there are no advertising or tracking cookies.
Community submissions
Clan names, Grand Exchange price reports and feedback messages are submitted by players and shown to others. Feedback is stored with whatever contact detail you choose to include — leave it blank to stay anonymous. Don't put anything private in a submission.
How long things are kept
- Stat snapshots & milestone dates — kept while the account is tracked, so long-term charts stay meaningful.
- Visit rollups — 40 days, then deleted automatically.
- Live activity feed & error log — capped, recent entries only (error log expires after 30 days).
- Claims, goals, rivals and notification settings — until you remove them or ask for deletion.
Removing your data
You can remove notification settings and un-claim an account yourself at any time from your profile. To have a player's tracked history deleted, or your Discord link removed entirely, ask via the feedback form or in the Discord serverand it will be done — no justification needed. If you'd rather an account was never tracked at all, say so and it will be blocked from lookups.
Children
The Codex isn't directed at children under 13 and doesn't knowingly collect their information. Discord's own minimum-age rules apply to signing in.
Changes & contact
If this policy changes materially, the date at the top changes and the site will say so. For anything privacy- or security-related — including reporting a vulnerability — use the feedback form or the Discord server. Security reports are welcome and will be acted on rather than argued with.
The Codex is an unofficial fan project. It is not affiliated with, endorsed by, or sponsored by Jagex Ltd. RuneScape and RuneScape 3 are trademarks of Jagex Ltd. Game data is provided by Jagex's public APIs; some images come from the RuneScape Wiki.