# Privacy

> What OSRS Grand Exchange stores for free accounts, price alerts, the watchlist, the newsletter and the contact form, the cookies and analytics it uses, and how to get your data deleted.

Canonical: https://osrsgrandexchange.com/privacy

We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). There are no ads on this site, and you don’t need an account to use it: prices, charts and calculators work without one. Calculators run in your browser; what you type into them isn’t sent anywhere.

## What we store

- **Free account (optional):** your email address and your password, stored as a salted hash (we can’t read it). We also keep the sign-in sessions you open, failed sign-in attempts (so we can lock an account for 15 minutes after 5 wrong passwords), whether you’ve confirmed your email, and whether you’ve asked for the weekly email and when.
- **Price alerts:** the item, whether you’re watching the instant-buy or instant-sell price, your target, whether the alert is on, and the price and time it last went off. An alert emails your confirmed address once each time the price crosses your target.
- **Watchlist:** the items you add and how many of each you hold. Only you (and the site’s admins) can see your watchlist and alerts.
- **Weekly email:** if you sign up in the footer, your email address, the box you ticked to agree, and the page you signed up on. We haven’t sent one yet; every issue will have an unsubscribe link.
- **Contact form:** your name, email, topic and message come to us by email, so we can reply; they aren’t saved on the site. We also get a short notice with your name and the topic (not your email or message) in our private team chat. To stop spam we count messages per IP address for an hour, in memory only; IP addresses aren’t stored.

## Cookies and analytics

If you sign in, a sign-in cookie keeps you signed in. We use Google Analytics to count visits and see which pages help people. It sets cookies and records things like the pages you view and your approximate location. It doesn’t tell us who you are. Videos are embedded from youtube-nocookie.com and only load when you press play. After that, YouTube’s own privacy policy applies.

## Who we share it with

Only the services that run the site for us: our hosting provider, Resend (sends our email), Google (analytics) and Discord (the contact-form notice). We don’t sell personal information.

## How long we keep it

Your account, alerts and watchlist stay until you delete them. Newsletter sign-ups stay until you unsubscribe or ask us to remove you. We keep contact messages in our inbox only as long as we need them to answer you.

## Your rights

You can delete alerts, watchlist items or your whole account from [your account page](https://osrsgrandexchange.com/account). Deleting your account deletes its alerts and watchlist too. To see, correct or delete anything else we hold about you, email [hello@osrsgrandexchange.com](mailto:hello@osrsgrandexchange.com). We answer within 30 days.