RuneCino Blackhat

[runecinoscam69]

Link the current Sythe account: @Dragon
Which violation you are reporting the user for: Blackhat
Why you think they're violating Sythe rules: I was minding my own business when i got multiple unsolicited pms from bot looking users urging me to join runecino. I join and before i can see anything in the server im told to verify with their bot. Thats cool but the disclaimer for the verify says this:

Disclaimer: By clicking the verification button, you indicate that you have read and understood these terms and conditions and agree to abide by them. If you do not agree, please do not use this server.

I go to verify, and somethings off. This verify bot will join servers for me and others have informed me it will farm my information limited to but not including email and ip. For such a serious breach of privacy i would think that you would need to notify your players of this? If this isnt against the rules sorry

Evidence:

Screenshot

 

@Dragon you will need to respond to this report

 

[Dragon]

Hi, thank you for bringing this to our attention.

Many well known and popular discord applications such as giveaway boat, sapphire bot, carlbot, various music bots, and security tools like restorecord require you to log into their dashboards to use. Much like Sythe, any website will have access to IP addresses, and may use them to evaluate users based on certain criteria. Some apps use this information to prevent alt accounts from joining giveaways, controlling who can access embedded information, or blocking malicious users.

It's common practice for discord communities to use verification as a protective measure. We, along with many communities, use a third party service restorecord to help keep our server safe by preventing known bad actors from joining and disrupting our community.

Large gambling discords like Sports Island and RuneStake use similar systems, or also use restorecord, to ensure fairness and safety, especially during giveaways. These giveaway or security applications are transparent about the permissions they request, and permissions you request may include access to your username, avatar, banner, public email, and the ability to join servers on your behalf.

Tracking IP addresses is a standard feature of nearly every website, from personal blogs to large platforms like gambling sites. Again, even communities like Sythe are no exception. Concerns about our use of restorecord are understandable but unfounded: its purpose is strictly to improve community safety. It's possible the individual raising concerns in this ticket is acting in bad faith, or for interests other than community safety.

The terms are for you to accept or deny we don't force you to make this decision and it's clear if you take the time to read the terms of conditions after you are redirected and what you are allowing restorecord to do before you accept or deny,

We’d also like to point out that a Sythe moderator, “Pirate,” has previously joined our discord without issue to help address a case involving a scam attempt in our sports betting section. Although Pirate did not help review our security, in his review of the case he found no wrong doing, and from the time of our founding we've had no issues.

 

@Dragon is there any warning that you are grabbing ips and emails (example in your TOS)?

 

[runecino]

Nameless here,

The TOS, discord application approval process, and final verification all include information on how the verification procedure works, and what it is used for. IP Addresses, and email addresses are not being stored by us. Admins can view IPs, but that is a side effect of the security feature that restorecord probably uses to check against alt accounts. As indicated in the discord popup, this feature has been enabled and active since Feb 10,2024:

Authorizing it will lead you to a verification that again warns you on what the process is, and what to expect with the join servers for you option:

It seems like this guy is playing it up, as most people use restorecord and follow the same TOS. I won't speculate on his reasoning, but looking at his throwaway sythe account, he obviously just wants to waste our time with a meaningless report.

That being said, we want to comply with all of sythe's rules, and prevent any issues of this occuring again. Let me know if this is sufficient in more plain text.

Again, the TOS mentions that if you don't want to verify, please dont enter our community. This is a private server not a public one, you are free and welcome to join but it is your choice, and certain rules must be adhered to in order to enter our community.

 

This report is being re-opened for further review. The TWCs have been removed, and @Pikachu will update here when a final decision has been reached.

 

@runecino who developed your discord bot?

 

I'll get straight to the point:

The members involved in this report contacted me to express disagreement with the decision. I requested a second opinion from the admin team, and they supported my original conclusion. The primary concern was how obscure the warning regarding the Discord bot was, along with the fact that Restorecord has experienced multiple data breaches and is potentially selling IP addresses (the latter is still under investigation and is not relevant to this particular case). Their updated Terms of Service are nearly adequate, though they should include a clause addressing the Discord bot's collection of email addresses.

I will be reinstating the original TWC. However, I will deduct four days from the duration, as my previous post (which has since been deleted) was made before the report was reopened. They may submit a dispute on 12/6/2025.