Privacy
CapeRack is a free, non-commercial hobby site run by one person in the United Kingdom. This page explains what it stores, why, and how to have it removed.
Last updated 2 November 2026
- Player stats come from the public Old School RuneScape hiscores.
- There are no ads, no third-party analytics and no tracking cookies. The only cookie keeps you signed in.
- Visitor counts use an anonymous ID that changes every day. IP addresses aren't stored.
- Nothing is sold or shared for marketing.
- You can ask for anything about you to be removed using the Contact page.
What's stored and why
| What | Why | How long |
|---|---|---|
| Hiscores data for tracked players: RSN, levels, XP, ranks, kill counts and when they changed | The core of the site: progress, gains, records, achievements, groups and competitions. This data is already public on the official hiscores. | While the player is tracked |
| Accounts: username, a securely hashed password (never the password itself), the country you signed up from, and the players and plans you've added | To sign you in and keep your Road to Max plans and groups | Until you ask for the account to be deleted |
| Road to Max plans: your XP rates, goals, play sessions and settings | To work out your hours to max. Plans are private to your account. | Until you remove the plan or the account |
| Groups and competitions: names, descriptions, pictures, clan chat, home world, member lists and ranks | To run group pages and competitions. These are public. | Until the group is deleted |
| Discord or Slack webhook links you add | To post the updates you asked for | Until you remove them |
| Contact messages: name, email (optional), message and country | To read and reply to your message | Until they're dealt with and deleted |
| Visit counts: page, day, country and an anonymous visitor ID | To see how the site is used. The ID is a one-way scramble of your connection that changes every day, so visits can't be linked across days or traced back to you. | Up to 13 months |
Cookies and local storage
One cookie, rtm_session, keeps you signed in. It's only set when you sign in and lasts up to 30 days. Your browser also remembers a few preferences on your own device, such as dismissed banners, chosen tabs and group management codes. These never leave your device.
Who else is involved
- Amazon Web Services (Lightsail) hosts the site and stores the nightly backups, kept for up to 4 weeks in private storage.
- Cloudflare sits in front of the site for security and speed, so it handles your connection and IP address.
- Google Fonts provides the Inter font, so your browser requests it from Google.
- Jagex's hiscores are where stats come from. The OSRS Wiki supplies icons, which are copied onto CapeRack's own server.
Your choices
Using the Contact page, you can ask to:
- stop tracking an RSN and remove its history
- delete your account and everything attached to it
- get a copy of the data held about you
- correct something that's wrong
Requests are usually handled within a few days. Under UK data protection law you can also complain to the Information Commissioner's Office.
Children
CapeRack doesn't knowingly collect personal information from children under 13. Accounts only need a username and password.
Changes
If this page changes in a way that matters, it'll be listed in the changelog.