Skip to content

Privacy

What Reverberation stores about you, why it is stored, and how to have it removed.

Last updated 30 August 2026

This page is incomplete. It does not yet name the person or company operating Reverberation, a contact address, or the governing jurisdiction — and a policy without those cannot be acted on. Set operator in components/OperatorIdentityNotice.tsx to complete both policy pages.

Reverberation is a free, non-commercial hobby project with no connection to Jagex Limited. Your data is never sold, never used for advertising, and never shared for anyone else's commercial purposes — there is no commercial purpose here to serve.

What is collected

Creating an account stores your email address and a hashed password. Passwords are hashed by Supabase, the authentication provider, and are never stored in a form this site can read back.

Claiming a name stores that username against your account. Names are permanent, and once claimed the name is sent to the game server so a matching game account can be created.

Playing produces game progress — levels, experience and account mode — which the game server publishes to this site so the hiscores can be shown.

Do not use a Jagex account email or password here. This service has no relationship with Jagex Limited and no way to verify anything about a Jagex account.

Why, and on what basis

  • Your email address — to create the account, confirm you control the address, and let you recover access. Necessary to provide the service you asked for.
  • Your password — to authenticate you here and to create your game login.
  • Your username and progress — to run the game and show the public rankings, which are a core part of what the service is.

What is public

The hiscores are public by design. Anyone can see your username, account mode, levels and experience, and the rank those produce. Your email address is never published, and neither is anything about your session, your inventory, your bank or your location in the game.

Your password and the game

The password you set here is also your in-game password. The game server cannot derive it from what this site stores, so when you claim a name — or change your password — it is checked against your account and passed once to the game server to set your game login. It is not kept beyond that.

Because the same password opens both, use one you do not use anywhere else.

Cookies

A session cookie keeps you signed in. It is required for the site to work, is marked HttpOnly and SameSite, and is removed when you sign out. There are no advertising cookies and no third-party analytics or tracking scripts on this site.

Who else sees it

  • Supabase — hosts the database and handles authentication and account emails.
  • Cloudflare — serves the site and the game client download.
  • The game server — receives your username and, once, your password, in order to create and run your game account.

These providers may process data outside your country. Nothing is shared with anyone else, and nothing is sold. Data may be disclosed where the law requires it.

How long it is kept

Account data is kept while the account exists. Ask for deletion and it goes. Public hiscores entries are removed with the account, though a seasonal reset may clear them sooner. If the service shuts down, account data is deleted rather than transferred.

Your rights

Write to the address at the top of this page to get a copy of what is held about you, have it corrected, have it deleted, or object to how it is used. There is no charge and no form to fill in. Depending on where you live you may also have a right to complain to a data protection regulator.

Deleting your account

Ask, and your account, email address and game progress are deleted. Because a username is permanent and appears in public rankings, tell us whether you also want the name released for reuse. Deletion cannot remove copies already taken by third parties, such as screenshots or search-engine caches.

Children

Accounts are not intended for anyone under 13, and are not knowingly created for them. If you believe a child under 13 holds an account, write to the address above and it will be deleted.

Changes

If this policy changes in a way that affects what is collected or who sees it, the change is announced on the updates page rather than made quietly.