Privacy Policy

TL;DR

We store the minimum data we need to make the Site work: your email for login, your Battle.net character list, your guild memberships, and your guild's encrypted Blizzard API key. We use Google Analytics to count visits. We don't sell anything to anyone. That's it.

What we collect

Account info. Your email address, when you sign up. Your password is handled by AWS Cognito — we never see it or store it ourselves.

Battle.net data. When you link your Battle.net account, we fetch your character list: character names, realms, classes, and guild memberships. We do not get your Blizzard password.

Guild data. When you claim a guild, your Blizzard API key is encrypted with AES-256-GCM before being saved. Guild roster data comes from Blizzard's public API and is publicly visible on the guild's page.

Preferences. Starred guilds, theme/accent settings, and your main character per guild.

Analytics. We use Google Analytics to measure traffic — page views, referrer, browser, country. We don't attach this to your identity.

How we use it

• Sign you in and keep you signed in
• Fetch and display your guild's roster data
• Remember your preferences between sessions
• Understand how many people use the Site
• Detect abuse, security issues, or bugs

Who we share it with

Nobody, with three exceptions:

• AWS — our infrastructure provider (databases, authentication, hosting). Your data lives in AWS us-east-1.
• Blizzard — we call their API to fetch roster data. They see that our servers made the request; they don't see your identity on our Site.
• Google — if you allow analytics cookies, Google Analytics collects aggregate usage data.

We don't sell your data. We don't share it with advertisers. We don't trade it to third parties.

How long we keep it

We keep your account data as long as your account exists. When you delete your account, we remove your personal data from our active database within 30 days. Backup copies may persist for up to 90 days before rotation removes them.

Your rights

You can view and update your account data from the Manage page. You can delete your account at any time — contact us if you need help. If you're in the EU, UK, or California, you have additional rights under GDPR and CCPA, including the right to request a copy of your data or request its deletion.

Cookies

We use cookies for authentication (keeping you signed in) and for Google Analytics. We don't use third-party advertising cookies.

Children

The Site is not intended for children under 13. We don't knowingly collect data from children under 13. If you believe we have, contact us and we'll delete it.

Changes to this policy

If we make significant changes, we'll update the "Last updated" date. Continued use of the Site after changes means you accept the updated policy.

Contact

Privacy questions or data requests? Reach out through the feedback channels on the Site.