Privacy Policy

Last updated: March 10, 2026

Lanodra ("we", "our", "the bot") is a Discord bot and web application for RuneScape 3 clan management. This policy explains what data we collect, why, and how it's handled.

1. Data We Collect

From Discord (via login with Discord):

  • Discord User ID, username, and avatar - Used to identify you and display your profile in the Clan Portal. We request the identify scope only. We cannot read your messages, see your servers, or act on your behalf through OAuth.
  • Bot permissions - Lanodra is invited to Discord servers with Administrator permission for reliability across varying server configurations. Despite having broad access, the bot only uses permissions needed for its documented features (role management, channel creation, posting updates, and slash commands). The bot does not read, log, monitor, or store the content of user messages. It only processes slash command interactions directed at it.

From RuneScape (via public APIs):

  • RuneScape Name (RSN) - Provided by you when you use the /track command.
  • Skill levels, XP - Pulled from the public Jagex Hiscores API.
  • Clan membership, rank, activity - Pulled from the public Jagex Clan API and RuneMetrics.

From your use of the bot and portal:

  • Point transactions, fund contributions, competition entries - Created when officers or members use bot commands or the portal.
  • Guild (server) configuration - Channel IDs, role IDs, timezone, and other settings configured by server admins.
  • Portal login timestamps - We record when you last logged into the Clan Portal for account management purposes.

From website analytics:

  • Google Analytics - We use Google Analytics to understand how visitors use our website. This collects anonymized data such as pages visited, time on site, and general location (country/region). Google may set cookies on your browser. See Google's Privacy Policy for details.

2. Data We Do Not Collect

  • We do not read or store Discord messages.
  • We do not collect your email address, real name, or payment information.
  • We do not track you across other websites or services beyond basic website analytics.
  • We do not use cookies for advertising. The cookies used are a secure session token for the Clan Portal login and standard Google Analytics cookies for website usage data.

3. How We Use Your Data

  • To provide clan management features (roster sync, XP tracking, rank management, etc.)
  • To authenticate you in the Clan Portal via Discord login
  • To determine your permission level based on your RS3 clan rank
  • To display dashboards and reports to authorized clan members

4. Data Storage and Security

  • All data is stored in a secured database on a private server. The database is not publicly accessible and is only reachable from internal application containers.
  • Encryption in transit: All connections to lanodra.com use HTTPS (TLS 1.2/1.3). API requests, portal logins, and form submissions are encrypted end-to-end between your browser and our server.
  • Encryption at rest: The server uses encrypted storage volumes. Database backups, if created, are stored on the same secured infrastructure.
  • The Clan Portal uses HTTPS-only, httpOnly, sameSite=strict cookies that expire after 24 hours.
  • We do not store your Discord access token. It is used once during login to fetch your user ID, then discarded.
  • In the event of a data breach affecting your information, we will notify affected users through our Discord server within 72 hours of discovery, including what data was affected and steps being taken.

5. Data Sharing

We do not sell, rent, or share your data with third parties. Your clan's data is only visible to members of your clan through the bot or portal, subject to permission tiers.

6. Data Retention

  • Your data is retained as long as you are a member of a clan using Lanodra.
  • If you unlink your RSN with /unlink, your player record and associated data are removed immediately.
  • If a clan stops using Lanodra, their data can be deleted upon request. We aim to fulfill deletion requests within 30 days.
  • Google Analytics data is retained according to Google's retention settings (default 14 months).

7. Your Rights

  • You can view what data we have about you through the bot's commands (/info, /stats, /points check).
  • You can request deletion of your data by unlinking (/unlink) or contacting us.
  • Guild owners can request full deletion of their clan's data.
  • If you are located in the European Union, you have rights under the GDPR including the right to access, rectify, or erase your personal data, and the right to data portability. To exercise these rights, contact us through our Discord server.
  • If you are a California resident, you have rights under the CCPA including the right to know what data we collect and the right to request deletion. We do not sell personal information.

8. Scope and Limitations

Lanodra is a free community tool for RuneScape 3 clan management. We do not collect payment information, process financial transactions, handle sensitive personal data (health, biometric, etc.), or operate as a commercial data processor. The data we store is limited to gaming-related information (RuneScape names, XP, clan ranks) and Discord identifiers necessary to provide our service.

9. Third-Party Services

10. Children's Privacy

Lanodra is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us for removal.

11. Changes to This Policy

We may update this policy as features change. Significant changes will be announced in our Discord server. The "Last updated" date at the top reflects the most recent revision.

12. Contact

For questions or data requests, reach us through our Discord server.