Legal
Privacy Policy
Last updated October 7, 2026.
This site is run by the Wasans website operators and project maintainers — a small group of people, not a company. There is no legal entity behind it yet, so this page will change if that ever changes.
For a copy of your data, use the Download my data button in Settings — it is instant and does not require asking us. For anything else privacy-related — a question, a deletion request — email tully@tully.sh.
If you log in with Discord, we ask it for its identify scope and keep:
- Your Discord user ID
- Your Discord username or display name
- Your Discord avatar hash and discriminator, when Discord gives them to us
The identify scope is the smallest one Discord offers. It does not include your email address, your servers, or any of your messages, and we could not read them if we wanted to.
We do not store Discord's access or refresh tokens. We use them once during login to ask Discord who you are, and then throw them away. Keeping them would mean holding credentials to your Discord account that we have no use for, so we do not.
You can also log in with Google. If you do, we ask it for the openid and profile scopes only — we do not request, receive, or store your email address. We keep:
- Your Google account ID
- A display name we seed your player name from at signup, taken from your Google profile name
We do not store Google's access or refresh tokens either, for the same reason as Discord's: we use them once during login and then throw them away.
Unless you also link a Discord account, the Discord-specific features described below — the submission thread post, moderation DMs, and rank-role/nickname sync — do not apply to you. There is nothing on the Discord side for us to post, DM, or sync.
You can log in with Roblox too, and link as many Roblox accounts as you play on, alts included. We ask Roblox for the openid and profile scopes only, and keep, for each linked Roblox account:
- Your Roblox user ID
- Your Roblox username and display name, as of the last time you logged in or linked with that account
We also look up each linked account's current username, display name, and avatar headshot from Roblox's public APIs, because those can change. We do not store Roblox's access or refresh tokens, for the same reason as Discord's and Google's.
Your linked Roblox accounts are not public.Only you and our moderators can see them. Moderators use them to check that the Roblox account in a run's video is yours, which is why we may require at least one linked Roblox account before you can submit. Our Discord bot can look them up for moderators too.
One wasans account can have one Discord account, one Google account, and any number of Roblox accounts linked to it, and you can log in with any of them. You link and unlink them in Settings. Unlinking removes that account's data from us; you can't unlink your last way to log in.
- An internal player UUID we generate for you
- Your player name, score, permission level, and the date you joined
- Whether your account is active, deactivated, or deleted, and when that changed
- When you last accepted these Terms and this Privacy Policy
- Two login cookies: a short-lived one that proves who you are, and a longer-lived one that quietly renews it so you are not asked to sign in again every 15 minutes
While you are logged in, we record the IP address your requests come from, along with a first-seen and last-seen time and a count. It updates as you use the site, not just when you log in.
We do this for one reason: it is the only practical way to spot someone running alternate accounts to evade a ban or pad the leaderboard. It is not used for analytics, we do not build a profile from it, and we do not share it.
These records are not visible anywhere on the site — not to you, and not to moderators. Only the people who administer the database can see them, and they are deleted 180 days after we last saw the address, or straight away if you delete your account.
We also count requests per IP to stop people hammering the API. Those counters include a value derived from your address and are thrown away after a day.
A leaderboard only works if it is public, so most of what you put in is visible to anyone — including people who are not logged in, and through the API as well as the site:
- Your player profile: name, avatar, score, rank, and join date
- Your account ID (your Discord user ID, or your Google account ID for an account started with Google), and your linked Discord user ID, which the public API returns so the site can build your avatar image
- If you have a Roblox account linked, the avatar headshot of the one you pick in Settings (but not which Roblox account it is)
- Your submissions: trial, time, state, and the moderator note and moderator name attached to them
- Your personal bests, any world records you hold, and the proof video for each run
- The link to the Discord thread for a submission, where one exists
Two things worth calling out, because they surprise people. Your account ID is public — the API returns it for everyone, and for a Discord account that means anyone can look you up on Discord from it. And a proof video is reachable by its link from the moment it is uploaded, which means runs that are still pending, or that were denied, can still be watched by anyone with the link. If you would rather a run not be seen at all, do not submit it.
Public submissions, scores, and videos can stay up after you delete your account. They show as Deleted Account.
- We process your account and login data to give you an account at all — without it there is nothing to log in to.
- We process scores, submissions, proof videos, PBs, WRs, and leaderboard data to run the leaderboard, which is the whole point of the site.
- We process IP addresses, audit logs, moderation notes, and error logs under legitimate interests: keeping the leaderboard honest, catching ban evasion and abuse, and fixing things when they break.
- We process deletion and privacy requests because the law says we have to.
When you submit a run we store the trial, the time, the state, who submitted it, and the proof itself. If you upload a file we keep the file; if you paste a supported proof link, we download the video from there and keep our own copy. Either way it lands in our video storage and is publicly viewable.
We also generate a still frame from the video to use as a thumbnail.
This section only applies if you have a Discord account linked — an account without one has none of this happen.
Submitting a run posts it to our Discord server automatically, in a thread for that submission. The post includes your player name, your Discord user ID, the trial, and the time — so anyone who can see that channel can see your run before a moderator has touched it.
We may also send you a Discord DM when a moderator decides on one of your runs, or when your rank changes. If your privacy settings do not allow DMs from us, the message is simply dropped.
We keep an audit log of submissions, moderation decisions, world record changes, and permission changes — what happened, who did it, and when.
We also log errors, both ours and ones your browser hits. An error log can include the full URL of the page you were on, your browser's user agent, the error message and stack trace, and your account if you were signed in at the time. We do not go looking for anything else, but a stack trace is written by the browser and we cannot promise nothing incidental ends up in one.
Here is everything we put in your browser:
- Two cookies that keep you logged in, plus a few short-lived ones during the Discord, Google, or Roblox login or account-linking handshake
- Your sidebar and interface preferences
- Calculator inputs, cached leaderboard data, and the submission IDs you looked at recently, so the next/previous arrows work
That is the whole list. All of it is either needed for the site to work or there to remember how you like it set up, it all stays in your browser, and none of it is used to track you across other websites. There are no advertising or analytics scripts on this site.
- Your account data sticks around while your account does.
- IP records are deleted 180 days after we last saw them, and immediately if you delete your account.
- Login tokens are deleted when you log out or delete your account, and expired ones are cleared out about a month later.
- Rate-limit counters, which include a value derived from your IP, are cleared out after a day.
- Audit logs and moderation notes are kept indefinitely. They are the leaderboard's history — who approved what, and when — and we would not be able to settle a dispute or unpick abuse without them.
- Error logs are kept indefinitely too. We should trim these and have not yet.
- Your public submissions, scores, PBs, WRs, and proof videos can stay up after you delete your account, because they are part of the public archive. They show as Deleted Account.
- We may hold on to something longer if we are dealing with abuse, a dispute, a security problem, or a legal obligation.
Discord handles login and our community features. Google and Roblox handle login for accounts that choose to sign in that way, and Roblox's public APIs give us current Roblox names and avatar headshots. Cloudflare hosts the site, the database, and the video storage. Medal and similar proof providers are involved when you submit a link and we fetch the video from them.
That is the complete list. We do not run ads, we do not use an analytics service, and we do not sell or share your data with anyone else.
Each of them handles data under their own policies, which we do not control.
Discord, Google, Roblox, Cloudflare, and the proof providers all operate outside the EU and EEA, so your data leaves it. We rely on the transfer terms those companies publish for their own services; we are not in a position to negotiate our own with them.
Deactivating is the reversible one. You can do it in Settings. It hides your account from the player listings, and logging in again with any linked account brings it back.
Deleting is not reversible. You can do it in Settings, or email tully@tully.sh and we will do it for you. It removes your account ID and avatar, the links to your Discord, Google, and Roblox accounts, your IP records, and every login token you have, and it renames your public profile to Deleted Account.
What stays: your submissions, scores, PBs, WRs, proof videos, and the audit log entries about them, all attributed to Deleted Account. We keep those because pulling one player's runs out of a leaderboard rewrites everyone else's history too.
This site is not meant for children under 13. By logging in with Discord, Google, or Roblox you are confirming you meet that provider's minimum age for your country, which is 13 in most places and higher in some.
You can browse the whole public site without logging in. If you do have an account, deactivation, deletion, and downloading a copy of your data are all in Settings. Beyond that, email tully@tully.sh and you can ask us to:
- See what we hold about you
- Correct anything that is wrong
- Have it deleted
- Restrict what we do with it
- Object to us processing it
- Take it elsewhere, where that applies
Some of these have limits — mostly around public leaderboard records, keeping moderation decisions auditable, and security. We will tell you which limit applies rather than just declining.
If we get it wrong, you can complain to your local data protection authority. In Finland that is the Office of the Data Protection Ombudsman.
The rules for using the site are in the Terms of Service.