Security & Privacy

Clear information about the services I run, the data they use, and how to report a problem. Updated September 13, 2026.

Player data

Rigour Hero stores game accounts, progress and social features. Kill Clog stores the collection log and character data players choose to publish. Neither service asks for your Jagex password.

The details belong with each product: Rigour Hero privacy and Kill Clog privacy.

Connections and security logs

Web requests expose an IP address to the services that handle the connection. I use connection information to operate the sites, investigate failures and limit abuse.

Logging and retention differ by service. Hosting, network protection and backup systems also handle operational data. These sites do not make a blanket promise that an IP address is never recorded.

Connection and account protection

The sites use HTTPS. Server administration uses SSH keys, and application services sit behind the web server and firewall. Rigour Hero uses password hashes, rate limits and account lockouts. These are protections we maintain, not a guarantee that a service cannot have a vulnerability.

Page analytics

GoatCounter counts page visits on the main sites without advertising cookies. Its privacy documentation explains what it processes. Product privacy pages describe other services used by their features.

Reporting something

If you find a vulnerability or notice something that looks off, message @ 420 kc in-game or email security@rigourhero.com. I respond within 48 hours and won't take legal action against good-faith researchers.