Privacy Policy
Last updated: 21 October 2026
This policy explains what data GE Watcher collects through the website gewatcher.com and the GE Watcher Android app (com.getracker.osrs), why, and what you can do about it.
In short
- There are no accounts. We never ask for your name, email address or RuneScape login.
- The website sets no cookies. A random visitor ID is only stored if you click Accept.
- The app links your alerts, timers, portfolios and purchases to an anonymous device ID.
- The free app shows Google ads. Pro users see none.
- We don't sell your data. Email ploegenroosterapp@gmail.com to see or delete it.
1. Who we are
GE Watcher is an independent price tracker for Old School RuneScape, run from the Netherlands. "GE Watcher", "we" and "us" mean the operator of the website and the app, who is the controller of the personal data described here under the EU General Data Protection Regulation (GDPR).
Contact: ploegenroosterapp@gmail.com
GE Watcher is not affiliated with Jagex Ltd. Jagex has its own privacy policy for your RuneScape account, and we never have access to that account.
2. The website (gewatcher.com)
Page visits, counted anonymously
When a page loads, we record the page address (for example /item/4151/abyssal-whip), the time, your browser's user-agent string (browser and operating-system version), and the domain of the site that sent you, if any (for example google.com). This record has no identifier, so we cannot tell whether two visits came from the same person. We use it to see which pages are used and to filter out bots.
Visitor ID, only with your consent
If you click Accept in the banner, we store a random visitor ID in your browser's local storage (ge_vid) and send it with each page view, together with the full address of the page that linked you. This lets us count unique visitors. The ID contains nothing about you and is not shared with anyone.
You can change your choice at any time with , a link at the bottom of every page. Rejecting deletes the ID from your browser. We ask again after 12 months.
Stored only in your browser
These items are kept in your browser's local storage, never sent to us, and are only there because you used a feature:
ge_consent: your choice in the bannerge_favorites: items you starred on the website. To show their prices, the item numbers are sent to our server without any identifier.recentSearches: your last few searches
You can remove them at any time by clearing this site's data in your browser.
Cookies
The website does not set any cookies.
IP addresses
Like every website, our server receives your IP address with each request. We keep it in memory for a few minutes to limit how many requests one address can make (this protects the service from abuse), and we do not store it in our database. Our hosting provider, Fly.io, may keep short-lived technical logs.
Content from other servers
Item icons load from RuneLite (static.runelite.net) and OSRS news thumbnails load from Jagex (cdn.runescape.com). Your browser fetches these directly, so those servers see your IP address and user agent, and their own privacy policies apply. Our fonts are hosted on our own server, so your browser does not contact Google Fonts.
Links to Google Play, the OSRS Wiki and runescape.com take you to sites with their own privacy policies.
3. The Android app
The app has no account. It does not ask for your name, email address or RuneScape login, and it does not access your contacts, location, photos or files. It uses these Android permissions: internet access, notifications, vibration, Google Play billing, and the advertising ID (for ads).
Device ID
The app uses Android's ANDROID_ID to link the data below to your device. It is a random value tied to our app's signing key, so other developers' apps see a different value and cannot use it to recognise you. It changes when the device is factory reset.
Usage statistics
With your device ID, the app sends us:
- when you open the app, the app version, and how many favourites and portfolios you have
- which item pages you open, and how long they take to load
- rewarded ads you watched, and banner ad impressions, clicks, failed loads and the ad revenue Google reports for them
- a few one-time events, for example whether you allowed notifications or reached the free item-view limit
Features you use
- Price alerts: the item, the alert type, the target value and its direction, and when the alert was set and triggered
- Timers: the timer's title, text and end time, so we can notify you when it ends
- Portfolios: the names you give them, the items, quantities and buy prices, and the value history we calculate
- Feedback: the message you send through Settings → Send Feedback, with your device ID
- Referrals: if you took part in the former referral programme, your referral code and the codes you redeemed
Your favourites, settings, item-view allowance, recently viewed items and home-screen widget data stay on your device. Only the number of favourites is sent to us.
Push notifications
To send alerts, timer notifications and occasional announcements (such as new items in the game), we store a Firebase Cloud Messaging token from Google for your device. You can turn notifications off at any time in Android's settings.
Purchases (GE Watcher Pro)
Google Play handles the payment. Google sends us the purchase token, order number, product, purchase state, renewal or expiry status, and the amount and currency it pays us for each order. We use this to unlock Pro, to check purchases with Google, and for our accounts. We never receive your payment details, name or Google account email address.
Advertising
The free version shows ads from Google AdMob: a banner below the item chart, and optional rewarded videos that give you extra item views. The Google Mobile Ads SDK collects information such as your advertising ID, IP address, device and app information and how you interact with ads, in order to show and measure ads, prevent fraud and, where allowed, personalise ads. Google is responsible for that data. See how Google uses information from apps that use its services.
You can reset or delete your advertising ID, or opt out of personalised ads, in Android Settings → Google → Ads (on some phones: Settings → Privacy → Ads). Pro users see no ads.
Market data
To show prices, the app and its home-screen widget download public market data from our server. That data is the same for everyone.
4. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Providing alerts, timers, portfolios, push notifications and support | Device ID, feature data, push token, feedback | Performance of a contract, Art. 6(1)(b) |
| Selling and verifying Pro | Purchase data from Google Play | Performance of a contract, Art. 6(1)(b) |
| Bookkeeping and tax | Order numbers, amounts, currencies | Legal obligation, Art. 6(1)(c) |
| Anonymous website statistics | Page, time, user agent, referring domain | Legitimate interest in knowing how the site is used, Art. 6(1)(f) |
| Counting unique website visitors | Visitor ID, full referrer | Your consent, Art. 6(1)(a) |
| App statistics and performance | Usage statistics above | Legitimate interest in improving the app and keeping it working, Art. 6(1)(f) |
| Paying for the free version with ads | Ad events; Google's own ad data | Legitimate interest in funding the free app, Art. 6(1)(f); Google's own basis for its processing |
| Protecting the service against abuse | IP address (in memory) | Legitimate interest in security, Art. 6(1)(f) |
Where we rely on legitimate interest, you can object at any time (see your rights).
5. Who else receives data
- Fly.io, Inc. (United States): hosts our servers and database, on our behalf.
- Google: Firebase Cloud Messaging delivers push notifications on our behalf. Google Play processes payments under Google's own privacy policy, and we check purchases through the Google Play Developer API. Google AdMob serves ads in the free app as an independent controller.
- RuneLite and Jagex: only the image requests on the website described above.
We do not sell or rent personal data, and we do not share it for anyone else's marketing. We will disclose data if the law requires it.
6. Transfers outside the EU
Our database is hosted by Fly.io in the United States, and Google may process data worldwide. Where a provider is certified under the EU–US Data Privacy Framework we rely on that certification; otherwise we rely on the European Commission's Standard Contractual Clauses in the provider's data processing terms.
7. How long we keep data
- Price alerts: until you delete them. Our server also removes an alert 90 days after it was set or triggered; the app sends alerts you still have again.
- Timers: removed when they end.
- Portfolios: until you delete them.
- Push tokens: removed when Google reports them invalid, or after 60 days without the app renewing them. The log of sent notifications is kept for 30 days.
- Purchase records: while your Pro access lasts, and after that for 7 years, as Dutch tax law requires for financial records.
- Website and app statistics, and feedback: kept while GE Watcher is running, to show long-term trends. They contain no names or contact details. You can ask us to delete the records linked to your device ID or visitor ID at any time.
- IP addresses: a few minutes, in memory only.
8. Your rights
Under the GDPR you have the right to access your data, correct it, have it deleted, restrict how we use it, object to processing based on legitimate interest, receive it in a portable format, and withdraw consent at any time (this does not affect processing that already took place).
To use these rights, email ploegenroosterapp@gmail.com. Because there are no accounts, we need a way to find your data: for app data, the easiest way is to send your request through Settings → Send Feedback in the app, which includes your device ID automatically. We answer within one month.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority in your own country.
9. Children
GE Watcher is made for Old School RuneScape players, and Jagex requires players to be at least 13 years old. We do not knowingly collect data from children under 13. If you believe a child has used the app, contact us and we will delete their data.
10. Security
All traffic to our servers is encrypted with HTTPS. Administrative functions are protected by secret keys, and only the operator has access to the servers and database. No system is perfectly secure, but we keep the data we hold to what the service needs.
11. Changes to this policy
We will update this page when the website or app changes how it handles data, and change the date at the top. For significant changes, we will also show a notice on the website or in the app.
12. Contact
Questions about this policy or your data: ploegenroosterapp@gmail.com