Privacy Policy

What we collect

We collect as little as the product allows. Signing in with Battle.net gives us:

• A Battle.net account identifier. A stable, opaque value from Blizzard. It is how we recognise you on return visits.
• Your BattleTag. Used as your default display name.
• Your World of Warcraft characters. Names, realms, classes, specialisations, item levels, guilds and performance figures, read from Blizzard’s API with your authorisation.
• An access token from Blizzard. Stored encrypted, used only to refresh your character list.

Anything else is information you choose to enter: languages, timezone, availability, playstyle, an optional short bio, and an optional Discord handle that is hidden unless you switch it on.

What we do not collect

• We never see or store your Battle.net password.
• We do not store your email address.
• We do not store raw IP addresses. Where an address is needed for abuse prevention, only a one-way hash is kept.
• We do not use advertising or cross-site tracking cookies. The only cookie we set is the one that keeps you signed in.

Reviews and reputation

Reviews you write are visible to others once published, attributed to your display name. Reviews about you contribute to your public reputation figures. Both are tied to groups you actually took part in.

Ratings are structured and comparable rather than free-form, which is also a privacy choice: there is less room for a review to become a vehicle for personal information about you.

Your rights

The platform is built for an audience in the European Union and is designed around the GDPR:

• Access and portability. You can export everything we hold about you in a machine-readable format.
• Correction. Profile information is editable at any time in your settings.
• Erasure. You can delete your account. Your profile, characters, preferences and the reviews written about you are removed.
• Objection and restriction. You can make your profile private, which removes it from search and public pages.

One honest limit on deletion

Reviews you wrote about other people are kept, with your identity removed. They appear as feedback from an unnamed verified teammate.

The reason: those reviews are part of a reputation someone else legitimately earned. If leaving the platform erased every review you had written, deleting an account would become a way to damage other people’s standing. The anonymised record contains no personal data about you.

How long we keep things

• Sessions expire after 30 days, or immediately when you sign out.
• Sign-in state records are single-use and expire in 10 minutes.
• Cached character data is refreshed on a schedule and replaced.
• Moderation records are retained so that decisions remain auditable.

Security

Session tokens are stored only as hashes. Provider access tokens are encrypted at rest. Our logs redact anything that looks like a credential before it is written.

Third parties

We send character lookups to Blizzard Entertainment’s API. We do not sell data, and we do not share it with advertisers or data brokers. Outbound links to community sites such as the Armory, Raider.IO and Check-PvP are ordinary links — following one takes you to a site with its own privacy policy.

Contact

Add a contact route and, where required, a data protection contact before the platform accepts public registrations.