osrs-mcp is a personal tool operated by and for one person. This page describes all the data it handles.
Sign-in uses Google OAuth with only the openid and email scopes. The
server uses your email address solely to check that you are the one account allowed to use it.
It stores the Google tokens needed to keep you signed in, encrypted, and uses them for nothing
else. It does not access your Gmail, Drive, contacts or any other Google data.
Skills, quests, diaries and similar data come from public sources (the official Old School RuneScape hiscores, the OSRS Wiki and WikiSync, and Wise Old Man). Bank, inventory and equipment snapshots are sent by the owner's own RuneLite client and stored so Claude can answer questions about them. No game account credentials are ever collected or stored.
Nothing is sold or shared. Data leaves the server only in answers to the signed-in owner's own requests through Claude.
Data is stored in Google Cloud (Firestore) in the owner's project. Revoking access at myaccount.google.com/permissions ends the sign-in; contact chernyshov.k@gmail.com to have stored data deleted.