Privacy

This page lists what skillset!analyzer stores, where it comes from, and who else sees it. The site is run by Iyako.

Public osu! data

The site stores public osu! data: profiles, stats and scores for players someone looks up, players on the leaderboards it shows, and players it compares you against. Some scores also come from osu!'s public data exports at data.ppy.sh. Skill ratings and map recommendations are worked out from these scores. This happens whether or not you've used the site, as it does on other osu! stats sites.

When you log in

• You log in through osu!. The site only asks to identify you, never sees your password, and keeps your osu! id, username, country and profile cover.
• Your browser keeps a login token for 30 days. Logging out deletes it from your browser.
• Logging in turns on play tracking. About every 10 minutes the site reads your recent plays from osu!, fails included, and keeps a log of each one: the map, mods, accuracy, combo, misses, grade, pp and when you played. Your passes also update your skill ratings.
• Your activity summary on your profile can be seen by anyone: when and how much you play, streaks, and your most played map. Only you can see the full list of plays.
• Tracking keeps going after you log out. To stop it, or to have your data removed, ask through the report page or message me on osu!.

Scores you add

When you add a score by link or replay file, the replay is read in memory to find the score and then thrown away. Only osu!'s own copy of the score is kept.

Ko-fi membership

For each payment, Ko-fi sends the site a notice. The site keeps the payment type, tier, amount, currency, Ko-fi transaction id and date. It also keeps a fingerprint (hash) of the payer's email, not the email itself. It doesn't keep your name or the message you wrote on Ko-fi. When you link your email on your profile, the same fingerprint is tied to your osu! account, along with when you last ran a deep scan. Anyone who already knows an email could check it against the fingerprint, so treat it as linked to you. Ko-fi handles the payment itself under its own privacy policy.

Bug reports

A report keeps your message, the page you sent it from, any contact details you add, your osu! name if you're logged in, and your browser's version string (to reproduce the bug).

Server logs

The site's server logs every request, including your IP address and the address you requested, such as which player was looked up. The logs are used to fix problems and stop abuse. Rate limits also use your IP address, but only in memory.

In your browser

No cookies, no analytics, no ad or tracking scripts. Your browser's storage keeps your login token, the leaderboard country you picked, and your map-preview skin and volume. Skins you import stay in your browser and are never uploaded.

Other services

• Your browser loads images straight from osu! (avatars, map covers, flags and badges).
• Playing a song in the map preview downloads it from a beatmap mirror (catboy.best or nerinyan.moe).
• A player's userpage, shown on their About tab, can load images and audio from any site they linked.
• The site runs on Vercel and its server is reached through Cloudflare. Like any host, they see your IP address.
• The server fetches data from the osu! API and beatmap files from catboy.best or osu!.

Each of these sees your requests the way any website does.

How long it's kept

Data is kept until it's removed. There's no automatic deletion, apart from the live feed's top plays, which drop off after a week.

Contact

Questions, or want your data removed? Use the report page or message Iyako on osu!.