On your device
Your progress (ticked achievements, plans, notes, settings and the stats from your last sync) is saved in your browser's local storage. It stays on that device until you clear it, use Settings → reset, or clear your browser's site data.
On Cape Tracker's server
Each device gets a random ID. The server never learns who you are, only what is listed here:
- Your daily stats history. Each day you sync, that day's levels, XP, quest count and cape percentages are copied to the server against the device's ID, so charts and pace estimates keep working past what a browser holds. The nightly update adds a copy of your skills, your recent Adventurer's Log events and your quest list each night. Settings → reset deletes all of it.
- Your display name and account type. After a sync, the RuneScape name and whether it is a main or an ironman are saved so the nightly update can record your stats, which fill the days you missed in your history. Turn it off under Settings → Backup & sync → Nightly update, which removes them straight away; resetting or deleting a character removes them too. They are deleted after 90 days without a sync.
- Whether your profile is shown in search results. Off unless you turn it on under Settings → Backup & sync → Show my profile in search results. On, your public cape progress page (built only from what the RuneScape API already publishes) is listed in this site's sitemap and may appear in search engines; turning it off takes it out of the sitemap within the hour and asks search engines to drop it. The choice is kept with your display name, so turning off the nightly update removes it too.
- Cloud backups of your progress. Unless you turn them off, each character's progress is copied to the server while you make changes, at most every 10 minutes, and when you leave the app: one copy per day for the last 14 days, so a cleared browser can be restored with your recovery code. Copies are deleted after 90 days without use. Turning off Settings → Backup & sync → Cloud backup deletes them straight away; Settings → reset deletes that character's.
- A sync link's copy of your progress. Only if you make a link or QR code to move your progress to another device. Anyone with the link loads that copy. It is deleted after 60 days, or straight away with Settings → Backup & sync → Remove sync link, or Settings → reset.
The average-player figures on Compare are built from the stats histories above, and only ever shown as a median and mean of at least five players. Data Viz percentiles come from the same histories, as cut points across at least 50 players. No one's name or individual numbers are shown.
Other services
- Jagex. Looking up a player sends their display name to Jagex's RuneScape API, through Cape Tracker's server. The Dashboard's clan card sends your clan's name the same way.
- Runepixels. Importing from Runepixels sends your display name to Runepixels.
- Wise Old Man. The OSRS tracker's history comes from Wise Old Man. Your browser asks wiseoldman.net directly, so Wise Old Man sees your IP address and the name you look up.
- RuneScape Wiki. Cape and item pictures load from runescape.wiki, which sees your IP address.
- Web3Forms. A message sent with Report an issue goes through Web3Forms to Cape Tracker's inbox, with whatever you write in it.
- Vercel Analytics and Speed Insights. They count page views and load times, and set no cookies.
Every lookup and sync is rate limited by IP address so no one floods the server. Cape Tracker keeps only a scrambled, unreadable form of your address, for under an hour, and never the address itself.
Cape Tracker does not sell, share or advertise with any of this, and sets no tracking cookies, so there is no cookie banner.
Where your data lives
- Amazon Web Services, Ireland. Your stats history, the nightly update's copies, the name list, cloud backups and sync links. Backup copies of these tables sit in Frankfurt, Germany.
- Supabase, United States. An older copy of the name list, stats history and sync links, kept while everything moves to Amazon Web Services. Cape Tracker retires it once the move ends.
- Vercel, United States. Hosts the site, counts page views, and keeps request logs with IP addresses.
- Web3Forms. Delivers Report an issue messages.
Supabase and Vercel hold data outside the European Union. Both process it under their data processing terms with Cape Tracker.
Why each item is kept
- Stats history, the nightly update and cloud backups: legitimate interest. They keep your charts and progress whole. Each one has an off switch in Settings → Backup & sync, which is your right to object.
- Sync links and search listing: your request. Nothing is made until you ask for it.
- Rate limiting, request logs and page counts: legitimate interest, to keep the site up and see how people use it.
- Report an issue: your request, to answer the message you send.
Your rights
- See your data. Send your recovery code through the contact page and you get a copy of everything held against it.
- Delete your data. Settings → reset removes a character's data from the server straight away.
- Object. Turn off the nightly update or cloud backup in Settings → Backup & sync.
- Complain. You have the right to complain to Ireland's Data Protection Commission.
Who runs Cape Tracker
Cape Tracker is run by Daniel, based in Ireland, who is the data controller for everything on this page. Questions or requests go to the contact page.