Privacy Policy

1. Who we are

This policy explains how Asterion ("we", "us") handles personal data on asterionrsps.com and related services. Contact: asterionrsps@protonmail.me.

2. What we collect

Depending on how you use Asterion, we may process:

• Website account details (username, email, password hash)
• Forum profile data (avatar, bio, posts)
• In-game character names you enter for store or vote features
• Payment and order metadata needed to process and deliver store orders
• Technical data (IP address in server logs, browser type, error logs)
• Session cookies required to keep you signed in
• Local browser storage for store cart contents (stays on your device)

3. Why we use it (purposes & legal bases)

We use this information to:

• Provide accounts, forums, hiscores, voting, and support (performance of a contract / legitimate interests)
• Process donations and deliver digital goods (performance of a contract)
• Keep the service secure and prevent abuse (legitimate interests)
• Comply with legal obligations when required (legal obligation)

We do not sell your personal information.

4. Payments and third parties

Checkout is handled by PayPal. Card and wallet details are processed by PayPal under their privacy policy — we do not store full payment card numbers. We retain order records needed to deliver rewards and resolve disputes.

Links to Discord or other external sites are subject to those services' own policies. Our interactive map may load content from the OSRS Wiki map service.

5. Cookies and local storage

We use essential session cookies for website login. The store cart uses browser local storage on your device. See our Cookie Notice for details. We do not currently use advertising or analytics cookies.

6. Retention

Website and forum data are kept while your account is active, and for a reasonable period afterward if needed for security, disputes, or legal requirements. Payment records may be kept longer where required for accounting or fraud prevention.

7. Your rights

Depending on where you live (for example under UK GDPR / EU GDPR), you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. To exercise these rights for website account data, email asterionrsps@protonmail.me. We may need to verify your identity before responding.

8. Children

The services are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have, contact us so we can delete it.

9. International processing

Servers and processors may be located in different countries than where you live. By using the services you understand your data may be processed outside your country, subject to appropriate safeguards where required.

10. Changes

We may update this policy. The "Last updated" date will change when we do. Material changes may also be noted on the website.