Privacy Policy
This Privacy Policy explains how VarrockExchange, operated by Jordan Basque (a sole proprietor in Alberta, Canada) ("we", "us", "our"), collects, uses, and protects information when you use VarrockExchange (the "Site").
1. Information We Collect
Account information (if you register). When you create an account, we collect your username, email address, and a securely hashed password. Passwords are hashed by our authentication provider and are never stored or visible to us in plain text.
Data you save. Your watchlist, price alerts, flip history, portfolio holdings, item comparisons, and similar preferences, so they can sync to your account.
Submissions. Information you voluntarily enter into contact, bug report, or feature request forms.
Automatically collected data. Basic technical data such as IP address, browser type, device information, and usage activity, collected by us and/or third-party services.
Local storage. For guests, some data (such as your watchlist) is stored locally in your browser and is not transmitted to us.
2. How We Use Information
- Provide and operate the Site and your account.
- Sync and restore your saved data.
- Respond to contact messages, bug reports, and feature requests.
- Maintain security, prevent abuse, and debug issues.
- Display advertising and understand general usage.
- Comply with legal obligations.
We do not sell your personal information.
3. Third-Party Services
We rely on third parties that may process your data under their own privacy policies:
- Supabase — account authentication and data storage.
- Netlify — hosting and serving the Site.
- Resend — sending account-related emails (such as confirmations).
- Advertising partners (such as Google AdSense) — advertising. Partners may use cookies and similar technologies to serve and personalize ads. You can control ad personalization at adssettings.google.com and Google's ads policies.
- Old School RuneScape Wiki API — supplies market data; we send requests to it but do not share your personal data with it.
4. Cookies and Similar Technologies
We and our advertising partners use cookies and similar technologies for essential functionality, preferences, security, and advertising. Where required (for example, in the EU/UK), we will request your consent before setting non-essential cookies, and you can withdraw consent at any time.
5. Legal Bases (EU/UK Users)
Where GDPR/UK GDPR applies, we process your data on the bases of: contract (to provide your account), legitimate interests (to operate, secure, and improve the Site), consent (for non-essential cookies and ad personalization), and legal obligation where applicable.
6. Your Rights
Depending on where you live, you may have rights to access, correct, delete, port, or restrict your personal data, to object to certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA; Canadian users have rights under PIPEDA and, in Alberta, the Personal Information Protection Act (PIPA). To exercise any right, contact our Privacy Officer at varrock.exchange@yahoo.com. You may also delete your account at any time, which removes your associated stored data. If you are in Alberta and are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca.
7. Data Retention
We keep account and saved data while your account is active and delete it within a reasonable period after account deletion, except where retention is required for legal, security, or fraud-prevention purposes.
8. Security
We use reasonable technical and organizational measures (including hashed passwords, row-level access controls, and encrypted connections) to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.
9. Children
The Site is not directed to children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
10. International Transfers
Your data may be processed in countries other than your own (including the United States, where some providers operate). Where required, we use appropriate safeguards for such transfers.
11. Changes
We may update this Policy. Material changes will be reflected by the "Last updated" date.
12. Contact & Accountability
We are responsible for the personal information under our control and have designated a Privacy Officer who is accountable for our compliance with this Policy and applicable privacy law, including Alberta's PIPA. Privacy questions, access or correction requests, and complaints can be directed to:
Privacy Officer, VarrockExchange
varrock.exchange@yahoo.com
We will respond within a reasonable time as required by applicable law.