AQ Closet

Privacy Policy

Last updated 14 September 2026. This describes what aqcloset.com collects, why, and how to have it removed.

The short version

You can use the whole wardrobe without signing in, and if you do not sign in nothing about you is stored at all. Signing in stores your Discord user ID, display name and avatar, plus the outfits you save; and if a character you look up is wearing an item nobody has catalogued yet, your display name is credited on it. There is no analytics, no advertising, no tracking, and nothing is sold or shared for marketing. Your AQW password is never asked for and never handled.

1. If you do not sign in

Nothing about you is recorded. There is no analytics script, no advertising network, no tracking pixel and no third-party script of any kind on these pages. No cookie is set, and no request log identifying visitors is kept.

Outfits you build without signing in live entirely in the page's address, which is what makes a share link work. They are not stored on the server.

2. If you sign in with Discord

Signing in uses Discord's OAuth with the identify scope and nothing else. That scope returns three things, and those are what is kept:

• Your Discord user ID: the number that identifies your account. It is what your saved outfits are filed under, and what matches you to your closet in the Discord bot.
• Your display name: shown in the corner so you can see you are signed in.
• Your avatar reference: used to show your picture in that same corner.

The identify scope does not include your email address, your servers, your friends, your messages or your connections, so none of those are received. The access token Discord issues is used once, to read those three fields, and is never written down.

3. What you create here

• Saved outfits: for each one: the name you gave it, the items and colours that make it up, a thumbnail reference and the time you saved it, filed under your Discord user ID.
• Items the catalogue learns: when you load a character and they are wearing something this site has never recorded, that item is added to the catalogue. What is kept is the item's name, file and slot, the name of the AQW character it was seen on, and the date. If you were signed in at the time, your Discord display name is kept with it and shown publicly as a credit on that item, and your Discord user ID is kept so that a deletion request can find it. The ID is never shown to anyone. If you are signed out the item is still recorded, with no name on it.

4. Cookies

Two cookies are used, both strictly necessary for signing in. Neither is used for analytics or advertising, and the site sets no others.

• ft_session: your signed-in session. It holds the three Discord fields above and the time it was issued, signed so it cannot be altered. It is HttpOnly, so scripts cannot read it, and SameSite=Lax. It lasts 30 days, and signing out clears it.
• ft_oauth_state: a short-lived value used only during the sign-in round trip, to prevent someone else starting it on your behalf. It is discarded as soon as you land back on the site.

5. Other services involved

• Discord handles the sign-in itself, under its own privacy policy. Your avatar image is loaded from Discord's servers by your browser, so Discord sees that request while you are signed in.
• The Discord bot's closet is read when you ask the wardrobe to open a set from it. The site asks for the items filed under your Discord user ID and uses the answer to fill the picker; it is not stored here.
• Artix Entertainment's servers hold the game art. Those files are fetched by this site, not by your browser, so browsing the wardrobe does not expose you to them.
• Railway hosts the site and, as any host does, processes the traffic that reaches it.

Nothing is sold, rented, or shared for advertising or marketing. Data is disclosed otherwise only where the law requires it.

6. How long it is kept

Saved outfits, and the Discord user ID they are filed under, are kept until you delete them or ask for your account to be removed. The session cookie expires 30 days after it is issued. Item catalogue entries are kept as part of the catalogue, since they describe an item rather than a person.

7. Your choices

• See it: everything held about you is visible on the site while you are signed in: your name and avatar in the corner, your outfits in your wardrobe.
• Delete part of it: delete any saved outfit from the wardrobe and it is gone from the server.
• Delete all of it: email [email protected] from an address you can be reached at, or ask through Discord, and everything filed under your account is removed.
• Sign out: clears the session cookie from your browser immediately.
• Revoke access: you can remove this site's authorisation at any time in Discord, under Settings, then Authorized Apps.

Depending on where you live you may also have rights to a copy of your data, to correct it, to restrict or object to its use, or to complain to a data protection authority. Asking at the address above is enough to exercise any of them.

8. Security

The session cookie is signed, so it cannot be edited or forged. Actions on your data require a token tied to your session. The site never receives, and has no way to obtain, your AQW or Discord password.

No service can promise perfect security. If something held here is ever exposed, anyone affected will be told on this site.

9. Children

Signing in requires a Discord account, which Discord requires you to be at least 13 to hold. This site is not directed at children under 13 and does not knowingly keep data from them. If you believe a child under 13 has signed in, write to the address below and it will be deleted.

10. Changes

If this policy changes, the date at the top changes with it. A change that affects what is collected or why will be called out on this page rather than slipped in.

11. Contact

Privacy questions, data requests and deletions: [email protected].