Privacy

Who we are

Gielinor Alpha is an independent OSRS Grand Exchange opportunity marketplace. We are not affiliated with or endorsed by Jagex Ltd.

Privacy questions: privacy@gielinoralpha.com

What we collect

• Account data — identity and session details managed by Clerk when you sign up or sign in (for example email and auth identifiers).
• Marketplace activity — bids, Buy Now purchases, allocations, credit balances, notifications, and related API records tied to your account on our service.
• Transactional email — we use the email on your account to send marketplace notifications (for example outbid, ending soon, auction won, Buy Now). We do not send marketing blasts.
• Billing data — credit pack purchases processed by Stripe. Card details are handled by Stripe; we receive payment status and identifiers needed to grant credits.
• Technical logs — ordinary request logs (timestamps, routes, error codes) used to operate and secure the service.

We do not run first-party analytics or advertising trackers on the site today. See the cookie notice for browser cookies.

Why we use it

• Authenticate you and protect account access.
• Run the board, unlocks, bids, credits, and allocation features you request.
• Process payments and prevent abuse or fraud.
• Deliver in-app and email notifications about marketplace events you participate in.
• Keep the service reliable and diagnose outages.

Processors

• Clerk — authentication and session management.
• Stripe — checkout and payment processing when you buy credits.
• Resend — transactional email delivery for marketplace notifications (for example outbid, ending soon, auction won, Buy Now).
• Hosting — the web app and API run on our hosting providers; traffic and logs are processed there to deliver the service.

Production operators should keep data processing agreements in place with Clerk, Stripe, and Resend when serving EU users.

Retention

We keep account and marketplace records while your account is active and for a limited period afterward as needed for billing disputes, abuse prevention, and legal obligations. Auth session cookies expire with Clerk's session settings. You can ask us to delete account data where applicable — see Your rights.

Your rights

Depending on where you live (including the EU/UK), you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing or request portability.

To exercise these rights, email privacy@gielinoralpha.com. You may also manage or delete your sign-in account through Clerk's account controls where available, and you can contact your local data protection authority if you have a complaint.

International transfers

Our processors may process data in the United States or other countries. Where required, transfers rely on appropriate safeguards provided by those processors (for example standard contractual clauses).

Changes

We may update this page when the product or processors change. The "Last updated" date above will change when we do.