Coffer Privacy Policy

1. What we collect

Coffer is a RuneLite plugin (client) plus a server at ge-copilot.onrender.com / meetcoffer.com. The plugin sends the following to the server over HTTPS:

• Account credentials. A username you choose and your password. We never store your password — only a bcrypt hash of it (a one-way, industry-standard hash; we cannot recover your original password, and even we can't read it back out).
• Email (required for every account). Every Coffer account must have an email address on file — new accounts provide one at signup, and accounts created before this requirement existed must add one via a one-time completion step the next time you log in (see "Your data, your choices," below). We use it for account recovery (self-serve password reset) and to contact you about your account, including the monthly recap described under "Sub-processors." We check that it's a validly-formatted email address, but we do not verify that you actually own/control it (there is no confirmation-email step today) — don't assume it's correct until you've successfully used it (e.g. a real password reset). If the email you enter already belongs to another Coffer account, it's silently not attached to yours — you won't see an error explaining why, and your account will have no recovery email on file (this is a deliberate anti-enumeration tradeoff so a signup or completion attempt can't be used to probe whether an email is already registered). This matters most if you play multiple OSRS accounts and reuse one email across several Coffer accounts: only the first account to register it keeps it. See "Your data, your choices," below, for what to do if this happens to you — including if it happens at the completion step and blocks you from finishing it.
• Who invited you (optional). If you sign up from a link that includes another member's Coffer username, we store that username once as who invited you. A code that doesn't match an account, is your own username, or is otherwise invalid is ignored, and signup still succeeds. We don't email anyone about it, don't send it to Discord, and don't attach rewards. The count of signups from invite links is visible only in our admin tools, not on your account page. Deleting your account removes this with the rest of your user record.
• Your Grand Exchange activity. The offers you place and trades you complete — item, quantity, price, buy/sell side, timestamp, and your in-game account/display name — so Coffer can track your profit & loss and give suggestions. You place every GE offer yourself; Coffer reports what already happened or is happening in-game, it does not place offers for you. On your account we also store timestamps for when the plugin first connects, when we first receive a GE offer, and when your first live trade is recorded, so a plugin heartbeat is not treated as captured trading.
• Derived data. P&L we calculate from the trades above, and aggregated fill-outcome samples (e.g. "did an offer like this fill within X minutes") used to improve suggestion quality across all users. These samples are keyed to items and price buckets, not to your account.
• Discord webhook URL (optional). If you turn on Discord alerts, the webhook URL you provide is stored so we can send alerts to it. Treat that URL as a credential — anyone with it can post to your Discord channel; we send alerts to it and nothing else.
• Preview-page visit counts. If you visit the public landing/preview page without an account, we record a hashed version of your IP address plus the date, only to count unique daily visitors. The hash is one-way; we do not store or use raw IP addresses for this, and it isn't tied to any account.
• Feedback you send us. Bug reports / feature requests submitted via the in-plugin "Send feedback" form, including an optional contact field if you choose to give one.

We do not collect real-money payment details today (Coffer's beta is free — see "Payments," below) and we do not collect your Jagex account credentials — Coffer only reads your locally-running RuneLite client's view of your own GE offers/trades, the same way any RuneLite plugin can.

2. Why we collect it (and the legal-ish basis)

If you're in a jurisdiction with a formal legal-basis requirement (e.g. EU/UK GDPR), treat the table above as our good-faith mapping, not a formal legal determination.

3. Where it's stored — sub-processors

We use a small number of third-party services to run Coffer. We don't sell your data, and we don't share it for advertising.

• Render — hosts the Coffer web server.
• Neon — hosts our Postgres database (region: US-East). This is where your account, trades, and offers live.
• Resend — sends transactional email (password resets and other account-related messages) on our behalf, from noreply@meetcoffer.com. This includes a monthly recap email summarizing your own account activity (your flips, profit for the month, best flip, win rate) with a link back to your dashboard — see "Your data, your choices," below, for how to turn it off. Since email is now required for every account, this reaches all accounts once they have a working email on file (accounts still working through the one-time completion step, below, won't have one yet).
• Cloudflare — our domain registrar and DNS provider for meetcoffer.com. Cloudflare sees DNS/routing metadata, not your account data.

We may periodically back up the database (compressed dumps) for disaster recovery. These backups contain the same personal data as the live database (including your email, if you have one on file, and your trade history) and are access-controlled to the developer, not public, and rotated/aged out over time rather than kept indefinitely.

If we add or change a sub-processor in a way that changes what happens to your data, we'll update this policy (see "Changes to this policy," below).

4. Security

• Passwords are hashed with bcrypt — never stored or logged in plaintext.
• All plugin↔server traffic is over HTTPS/TLS.
• Sessions use signed tokens; changing your password invalidates old sessions (a "session-kill" mechanism), so a stolen old token stops working once you reset.
• Password-reset tokens are single-use, expire in 30 minutes, and are stored as a one-way hash, never in plaintext.
• No system is perfectly secure. If we ever have reason to believe your data was exposed in a breach, we will notify affected users. This policy is not itself a breach-notification procedure.

5. The third-party-server disclosure (why this matters)

Coffer is a third-party plugin, not made or verified by Jagex or the RuneLite developers. Installing it and creating an account means your GE offers and trades are sent to our server (see above) — this is disclosed up front in the RuneLite Plugin Hub listing, the plugin panel, and the landing page, and stays true regardless of what else changes in this policy. If what we collect changes, that disclosure gets updated too, not just this document.

6. Your data, your choices

• Access: email us (admin@meetcoffer.com) and we'll tell you what we have on your account.
• Delete your account: email us and we'll delete your account. Deleting an account removes your user record, trades, watchlist, open offers, email address, and any pending password-reset tokens from the live database. There is currently no self-serve in-app delete button — it's a request to us. Aggregated fill-outcome samples used for suggestion quality aren't tied to your account and can't be traced back to you, so they aren't removed by an account deletion. Feedback you've submitted (bug reports, etc.) is also removed when your account is deleted. Caveat: deletion removes data from the live database; it does not retroactively scrub already-taken database backups, which age out and rotate over time (see "Sub-processors," above).
• Correction: email us if something's wrong (e.g. a bad email on file) and we'll fix or remove it.
• Opt out of optional data: Discord alerts are off by default and never required. Email is not optional: it's required for every account (see "What we collect," above). If your account predates that requirement, the next time you log in you'll be asked, once, to add a recovery email and confirm you agree to the current Terms of Service and this Privacy Policy before you can keep using Coffer. This isn't a retroactive claim on data you gave us under older terms — it doesn't change what we do with your existing trade history — it's a forward-looking requirement so every account is reachable for password resets and account-related email. If you'd rather not add an email, you can decline and stop using Coffer, and you can still request account deletion (below) either way.
• Opt out of the monthly recap: every recap email has a one-click unsubscribe link that turns it off immediately. This only affects the recap — it does not unsubscribe you from essential account email like password resets or security notices, which we send regardless.
• No recovery email attached (email collision at signup or completion): if an email you entered — at signup, or at the mandatory one-time completion step — turned out to already belong to another Coffer account, self-serve password reset won't work for your account, and (if you're completing the mandatory step) you won't be able to finish it with that address. This is not a dead end: email us (admin@meetcoffer.com) and we'll help verify you own the account manually and get a working email attached, so a required step never permanently locks a legitimate user out with no recourse. We can't promise the same self-serve recovery guarantee we can for accounts with a working email on file, but we will get you unblocked.

7. Children / age

Old School RuneScape's playerbase skews young, and we have no reliable way to verify age. Coffer is not directed at children, and we ask that anyone under the age of majority in their jurisdiction not use it without a parent/guardian's awareness. We intentionally collect the minimum data needed to run the product (no real name, address, phone number, or payment details today) and never ask for more than an in-game trading history, a username/password, and (for new accounts) an email address. If you're a parent/guardian and believe your child has given us data you'd like removed, email us and we'll delete the account (see "Your data, your choices," above).

8. Cookies / local storage

The Coffer web dashboard uses your browser's localStorage (not cookies) to keep you signed in and remember dashboard preferences on your own device. We don't use advertising cookies, tracking pixels, or third-party analytics scripts on the dashboard. Clearing your browser's site data for meetcoffer.com signs you out.

9. International data transfers

Our database (Neon) is hosted in the US. If you access Coffer from outside the US, your data is transferred to and stored in the US. We are not making a jurisdiction-specific representation (e.g. EU Standard Contractual Clauses) about that transfer today. If this matters to you — e.g. you're an EU/UK/other-regulated user and need a specific transfer mechanism — contact us before relying on Coffer for that use case.

Coffer does not sell your data and does not implement CCPA/CPRA-specific mechanics (like recognizing browser-level opt-out signals such as Global Privacy Control) today.

10. Payments (future)

Coffer's beta is currently free. If/when paid tiers launch, payment processing will be handled by Stripe, and Stripe (not Coffer) will hold your card details — we don't plan to see or store full card numbers ourselves. This policy will be updated with the specifics (what billing metadata we do retain, e.g. subscription status) before any paid tier goes live; see the companion Terms of Service for planned billing/refund language.

11. Changes to this policy

We'll update this document as Coffer's data collection changes (e.g. when payments launch) and update the "Effective date" above. We won't expand what we collect about existing users without updating this policy and the in-product disclosure first.

12. Contact

Questions, access/deletion requests, or concerns: admin@meetcoffer.com.