What the game server stores
When you play ONYX the game server stores your account name, a hashed password, your character’s progress (skills, items, bank, quests and similar game state), your Grand Exchange offers, your lottery tickets, and records of logins and moderation actions. Connection details such as your IP address are kept to prevent abuse.
What this website shows publicly
- Your display name, game mode, skill levels, XP and ranks on the hiscores.
- Your boss kill counts, on the boss hiscores and on your profile. Only a fixed list of boss counters is read. Other saved game values stay private.
- Rare drops recorded for your character. Each item is shown once, with the total number received and the kill count and date of the first drop. Opening that row lists every drop of the item with its kill count and date. When a fight does not track a kill count, the site says so and does not show a number. The latest drops are also listed at the top of your profile, with the NPC they came from. The time of day is not shown.
- Your display name, character id, ticket lines and GP burned in the lottery ledger, and your name if you win. This is what lets anyone check a draw.
- Grand Exchange prices and offer totals, which never show who placed an offer.
Characters marked hidden, and characters who are banned, are left off the hiscores. That includes skill ranks, boss kill counts and rare drops. The website never shows account names, passwords, email addresses, IP addresses, when you were last seen, whether you are online, or where you are.
Cookies and analytics
This website uses Google Analytics only if you allow it in the cookie notice. Until you choose, and if you decline, it sets no cookies and sends nothing to Google.
If you allow it, Google Analytics sets cookies named _ga and _ga_ followed by an id, kept for up to two years, and receives the pages you visit, the links and buttons you click, your browser and device type, and your approximate location. Google works out the location from your IP address and does not store the address. Google signals and ad personalization are off. See Google’s privacy policy.
Your choice is kept in your browser’s local storage. Change it any time with Cookie settings at the bottom of every page; declining deletes the analytics cookies. The server that hosts this website keeps standard request logs, including IP addresses, for security. It runs no advertising trackers.
Cloudflare, which delivers this website, adds a small script that measures how fast pages load. It sets no cookies, does not identify you, and is not used for visitors in the EU, UK or Switzerland. See Cloudflare’s privacy policy.
Bug reports
When you send a bug report from this website or with /bug in Discord, what you write, the files you attach, and the in-game name you give (for /bug, also your Discord account) are posted to a staff-only forum in the ONYX Discord. Only staff can read it, and Discord stores it under its privacy policy. We use reports only to fix bugs and deal with exploits, and delete one on request. To limit spam, the website holds your IP address in memory for ten minutes after a report and never writes it down.
Seeing, correcting or deleting your data
You can ask for a copy of the data we hold about your account, ask us to correct it, or ask us to delete your account and its data. Contact the ONYX Discord from the account in question, or with enough detail for us to confirm it is yours. We answer within 30 days.
Deleting an account removes it from the hiscores. Past lottery ledgers keep the character id and ticket lines so old draws can still be checked, but the name is shown as a deleted character.
Changes
If this policy changes, the date at the top of this page changes with it.