YOUR DATA

RuneFolio Privacy Policy

What RuneFolio collects, why, and the controls you have over it.

Last reviewed: 2026-09-17

Overview

RuneFolio is an independent Old School RuneScape character portfolio. It is not affiliated with or endorsed by Jagex or RuneLite. This policy explains what information RuneFolio collects through the website and the RuneFolio Sync RuneLite plugin, how it is used, and the controls available to you.

Account and sign-in

Creating a RuneFolio account needs an email address, either directly or through Google or Discord sign-in. Signing in with Google or Discord shares the account identifier and basic profile details that provider makes available, such as a display name and avatar; RuneFolio never receives your Google or Discord password.

Authentication and account records are handled by Supabase, RuneFolio's backend provider.

Character and plugin data

With the RuneFolio Sync plugin installed and connected, RuneFolio can receive Old School RuneScape character information you enable in the plugin's settings. Depending on what you turn on, this may include skill levels and experience, quest progress, achievement diary tasks, loot and Collection Log activity, boss/Slayer/clue completion history, bank snapshots, PvP results, and screenshots tied to specific in-game events such as pet, level-99 or rare-item captures.

Each data category and each screenshot type has its own setting in the plugin and is off unless you turn it on. A manual Hiscores check instead reads only the publicly available Hiscores values for supported skills and boss kill counts, and cannot recover historical drops, screenshots or bank contents.

Discord achievement sharing

Discord achievement sharing is a separate, opt-in Pro feature. When you enable it, selected screenshot milestones or loot drops you choose are posted to RuneFolio's own Discord server. This can reveal a character name, screenshot caption or loot total even on an otherwise private profile; the screenshot images themselves are not posted.

This feature does not require linking your Discord account or creating a webhook, and is independent of using Discord to sign in to RuneFolio.

Public profiles

Every RuneFolio account has a public/private visibility setting, plus per-character and per-section controls, available in your portfolio settings. A public profile is reachable at runefolio.app/u/ followed by your handle. Nothing recorded by the plugin is shown publicly unless you choose to make it visible.

Where data is processed and stored

RuneFolio's website is hosted on Vercel. Account records, character data and uploaded screenshots are stored using Supabase. RuneFolio does not sell your data or share it with advertisers, and does not run third-party advertising or analytics trackers on the site.

Cookies

RuneFolio uses cookies only to keep you signed in and to remember interface preferences, such as your screenshot view filter. These cookies are not used for advertising or cross-site tracking.

Payments

RuneFolio Pro is currently a preview. Purchases are closed, and RuneFolio does not collect or store payment card details. If paid Pro access launches in the future, payment processing will be handled by a third-party payment processor, and this policy will be updated before that happens.

Retention

Planned retention for ordinary screenshots and individual loot/kill records is 30 days on Free and one year on Pro, with Pro-protected memories intended to avoid automatic age-based expiry while Pro remains active. Automatic age-based deletion is not active yet; nothing in your account is currently deleted on that timer, beyond the existing seven-day Trash window for screenshots you delete yourself.

Your controls

You can change your profile and character visibility at any time, turn individual plugin capture settings on or off, and disconnect the plugin or a Google/Discord sign-in from your account. To ask what RuneFolio holds about you, request a copy of it, or ask for your account and its data to be deleted, contact RuneFolio through Discord support — this is currently handled by staff rather than a self-serve control.

Children

RuneFolio is not directed at children and is not knowingly used to collect information from anyone below the minimum age required to hold an Old School RuneScape account.

Changes to this policy

This policy may be updated as RuneFolio's features change. Material changes will be reflected here with an updated review date.

Contact

Questions about this policy or your data can be sent through RuneFolio's Discord support area — see the Support guide for how to reach staff.