Privacy
at the qualifier

Collection

Data we process

When you sign in and submit a qualification entry, the portal processes your osu! user ID and username, the online score ID and result fields contained in your replay, and the corresponding official score record. The replay is read in memory for validation and is not saved to disk by this application.

• osu! identity: used to bind the replay and official score to the authenticated player.
• Official attempt: its score ID, beatmap, completion status and time are checked through osu!'s API.
• Replay data: parsed only to evaluate the qualification rules.
• Session cookie: stores qualification status and username in a signed cookie.
• Network information: your IP address is used temporarily for rate limiting and may appear in operational access logs.

Purpose

How it is used

The information is used only to operate the challenge: validate replay requirements, prove that osu! recorded an attempt by the signed-in player, prevent impersonation, control abusive traffic, and grant successful participants access to the competitor page.

The portal does not sell participant data, build advertising profiles, or use replay submissions for unrelated purposes.

Third Parties

External services

Your browser is redirected to osu.ppy.sh for authentication. The server then obtains your user ID and username and queries the submitted online score ID. The short-lived user access token is discarded after identification and is not placed in the browser session.

Your browser also requests typography from Google Fonts and icons from cdnjs. Those providers may receive standard request information such as your IP address, browser details, and referring page under their own privacy terms.

Storage

Retention

Uploaded replay bytes and the OAuth user access token are discarded when their requests finish. Qualification sessions containing the osu! user ID and username expire after 30 minutes. Rate-limit records and osu! lookup results are temporary in-memory data. Operational log retention depends on the event server configuration.

The competitor key is stored only in server configuration and is not placed in the public qualifier page or frontend scripts.

Control

Your choices

Participation and osu! authorization are optional. If you do not want the portal to process your identity, official score or replay, do not authorize or submit the qualification form. You can remove the qualification session from your browser by clearing site data for this portal or closing it after the session expires.

Questions about the event server or its logs should be directed to the Sunway Mania 2026 organizers through the official event channel.