Legal

Fury Accounts is a trading name operated by Fury, a UK sole trader.

Fury Accounts is an independent third-party service. It is not affiliated with, endorsed by, or operated by Jagex. Jagex, RuneScape and Old School RuneScape are referenced only to describe the third-party digital products sold here.

A Fury Accounts login is only for this website. Buyers are not asked to provide their existing Jagex password or authenticator code to browse or purchase. Product credentials displayed after a purchase are the digital goods being delivered; they are not credentials taken from a buyer's existing Jagex account.

The accounts sold here are digital content delivered immediately on payment. By placing the order you give your express consent to immediate supply and acknowledge that, once the credentials appear on your order page, the 14-day statutory cancellation right under the Consumer Contracts Regulations 2013 no longer applies. The refund terms below still apply.

A replacement or refund is available only if the account was already banned before the credentials were delivered. Contact me with your order number and do not change the supplied credentials while I verify the account status. Accounts banned at or after delivery, including delayed bans and bans caused by how the account is used or botted, are not covered. Your statutory rights under the Consumer Rights Act 2015 are not affected.

Advertising links count visits using a keyed hash of the request's network address and browser header to suppress repeated clicks for 24 hours. Raw addresses and browser headers are not saved in campaign records. The resulting hints are scoped to one campaign and visit window; they are estimates, not reliable identities or a count of unique people. Shared networks can merge visitors, and changing networks or browsers can look new. Known preview bots and prefetches are counted separately. Earlier request counts are retained separately because they cannot be deduplicated retrospectively.

Ad-to-purchase measurement is optional. If you allow it, a first-party HttpOnly cookie remembers the signed campaign, link and click time for up to 30 days. The first stored source is frozen alongside an order when checkout succeeds, so a later confirmed payment can be counted once. These private records contain the internal order reference and ad source, not the order access token, credentials or an advertising-network identifier. The ad cookie does not change prices, affiliate commissions, payments or order ownership. Independent sellers' purchases cannot be verified by this shop.

You can decline or turn off this measurement using “Ad measurement settings” in the footer. Refusal removes the optional ad cookie; a necessary preference cookie remembers your choice for up to a year. Campaign and order-attribution records are retained with shop records and encrypted recovery backups; the report displays up to 90 days at a time. Existing security and rate-limit controls operate separately.

I collect the information needed to run the shop: your email, username, hashed password if you set one, order history, optional linked Discord ID, support and stock-alert records, and security logs. If you sign in with Google or Discord, I also store that provider's account ID, email and email-verification status to recognise your account. If you enable two-step verification, I store encrypted authenticator secrets, hashed recovery codes, or passkey public keys and security metadata. Signing in with Discord and linking Discord for wallet or community features are separate choices. If you join the affiliate program, I also store your referral code, Litecoin payout wallet, referred-order commission ledger, payout history and any transaction note I record. Cloudflare processes IP addresses, user agents and browser security signals for abuse prevention, Turnstile checks on account creation and, where enabled, browser verification during sign-in and recovery, and cookieless analytics.

On desktop, the homepage stores a first-party artwork preference in your browser and a short-lived fury_home_herocookie. This keeps one hero stable during an active visit, allows a signed-in user to pause rotation, and attributes aggregate views, browse clicks and purchases to an artwork variant. Hero analytics store daily totals only: no visitor ID, IP address, user ID, user agent or raw URL is retained in the experiment table. Completed checkouts attach only the selected variant ID to the existing order record so conversion can be compared. The cookie expires after one hour.

Signed-out homepage visitors may also receive a first-party fury_home_layout_v1 cookie for up to 30 days. It keeps the visitor in one of two homepage layouts while aggregate views, product clicks, registration clicks, checkout starts and completed orders are compared. The experiment records the layout, coarse device class and selected hero artwork, but does not store an anonymous visitor ID, IP address, user agent or raw URL in the experiment table. Signed-in homepage visits are not enrolled.

Essential session cookies last up to 30 days. Your selected display currency can be remembered for a year. Where optional performance measurement is enabled, I keep aggregate page-speed measurements in application memory for up to 24 hours. These measurements use a fixed page category and broad device size, without a visitor ID, account ID, IP address or full page URL.

I use this information to fulfil orders and run accounts under our contract, meet tax and accounting duties, prevent abuse and keep the service secure under legitimate interests, and administer affiliate commissions and payouts. I rely on your consent for the optional affiliate-referral cookie described below.

When you open an affiliate link, I ask before setting the first-partyaff_visitor cookie. If you allow it, the cookie and a hashed server-side token attribute a qualifying order to that affiliate for 7 days. It does not change your price. Expired hashed referral rows are deleted after a 30-day operational grace period. You can decline without losing access to the shop or withdraw consent at any time in referral preferences. Essential security, session and basket cookies operate separately.

I share only what is needed with Sell.app for payment and fulfilment, Stripe for card payments, Resend for transactional email, Cloudflare for hosting and security, Google or Discord when you choose that sign-in method, and Discord when you separately link it or request Discord notifications. I do not sell personal data. Order, commission and payout records are kept for at least six years for UK tax and accounting records; other account data is kept while your account exists unless a longer period is needed for security, disputes or a legal obligation.

Active stock-alert subscriptions expire after 180 days without a restock, or can be cancelled earlier in your profile. Successfully delivered alerts are normally removed from the subscription table; a delivery record may remain if that removal fails. Pending delivery and failed-alert records may remain for retry handling or support; the 180-day expiry is not a promise that every related delivery log, suppression record or backup is deleted at that time.

Under UK GDPR you can ask to access, correct, delete, restrict or export your data, or object to processing, by emailing [email protected]. Where processing is based on consent, you can withdraw it at any time. You may also complain to the Information Commissioner's Office.

For order help, customer support, or a complaint, email [email protected]. For legal notices, privacy requests, or data-rights requests, email [email protected]. You can also open a support ticket in the Discord server.