Privacy

What this site collects

There are no advertising scripts and no third-party trackers on this site. One script does come from somewhere else, the Wowhead tooltip widget, and it is described further down.

Cloudflare hosts every page. Serving a page means Cloudflare receives the normal things any web server receives: your IP address, the time, which page you asked for, and the user agent string your browser sends. That's how the page reaches you and how attacks get blocked.

Cloudflare Web Analytics counts how the site gets used: which pages are viewed, which site you came from, your country, the kind of device and browser you are using, and how fast the page loaded. It sets no cookie, stores nothing in your browser, and does not fingerprint your device. It does not follow you to other sites. I can see that a page got 400 views, but not who any of those people were.

Cookies

No cookie on this site is used for analytics, advertising, or tracking.

Two are set by this site, both only on the PTR Builds page, and only if you choose to sign in there. session is set when you sign in so the page knows whether to show you subscriber builds, and it lasts 7 days for subscribers and 1 hour for everyone else. oauth_state is set for 10 minutes while you are signing in, so that the sign-in cannot be triggered by someone else on your behalf.

Both are required for the sign-in to work, which is why there is no banner asking you to accept them.

Signing in with Discord

Some builds on the PTR Builds page are for subscribers. If you sign in, Discord asks your permission first, then tells this site your Discord user ID and which roles you hold in my Discord server. This site does not receive your email address, your password, or your messages.

There is no account database. Your Discord ID is not stored on any server I control: it goes into the signed session cookie in your own browser, and when that cookie expires it's gone. Signing out clears it immediately.

Things that load from other companies

The front page has two embedded panels that load from somewhere else. When they load, that company receives your IP address and the fact that you were on the page, the same as if you had opened their site yourself.

One is Ko-fi, for the support panel. The other is my latest YouTube video, which loads through youtube-nocookie.com so that YouTube sets no advertising cookie unless you actually play the video.

The UI page also has video tutorials on it, and those load differently. Their thumbnails are stored on this site, so nothing is requested from YouTube when the page opens. Pressing play on one is what loads the video, and from that point youtube-nocookie.com receives your IP address the same way the panel on the front page does. If you never press play, that page does not contact YouTube at all.

Talent and ability names link to Wowhead. On the pages that have those links, a small script loads from Wowhead so the links show a tooltip when you hover them. It loads whether or not you hover anything, so Wowhead receives your IP address and which page you were on. Anything that script stores in your browser is Wowhead's, not mine.

Every other outside link on this site, to Warcraft Logs, Icy Veins, Discord, Twitch, Patreon, Wago, and the rest, is an ordinary link. Nothing loads from those until you click.

If you send me logs or a VoD

The review form linked on the Sub page is a Google Form. What you type into it comes to me, and Google handles it on the way. I use it to do the review you asked for and nothing else.

Legal basis and where the data goes

Under GDPR, the server logs and the analytics run on legitimate interest: I have to serve the site, keep it working, and know roughly how many people read it. The Discord sign-in runs on your consent, given when you approve the Discord prompt, and you withdraw it by signing out. The review form runs on your consent too, given by submitting it.

Cloudflare, Discord, and Google are United States companies and handle this data under the standard contractual clauses.

How long it is kept

Analytics stay available to me for about six months, as totals. Cloudflare keeps its own server logs under its own retention policy. The sign-in cookie expires by itself as described above.

Review form submissions I keep indefinitely. There is no deletion schedule on them, so if you want yours gone, ask me and I will delete it.

Your rights

You can ask me what data I hold about you, ask for it to be corrected or deleted, object to me processing it, or ask for a copy of it. Email or message me on Discord and I'll sort it out. In practice there is very little to hand over, because the analytics cannot be traced back to a person and there is no user database.

If you think I have handled something badly, you can complain to the data protection authority in your country.

Last updated 2026-08-07. If any of this changes, the date changes with it.