Privacy Policy

When you browse

You can use the reputation calculator, faction pages and gear list without an account. When you do:

• Our server records each request, with your IP address and browser, as web servers do, to keep the site running and protect it from abuse.
• The character you look up (its name, realm, region and avatar) is saved in your session, so the site can take you back to it. Character data comes from Blizzard's public API.
• Google Analytics measures how the site is used, and Google AdSense shows ads, as described below.

When you have an account

• Your email address, the name you give, if any, and your password, stored only as a secure hash.
• Your premium subscription: whether it's active and when it's paid through.
• If you sync your characters, their names, realms and regions. You sign in to Battle.net on Blizzard's own site; we use the access it gives us once to list your characters, and don't keep it.
• The world activities you tick off on the Great Vault checklist.

We use your email address to sign you in and to send account emails, such as password resets. We don't send newsletters, and we don't sell or rent your account information to anyone.

When you contact us

The contact form emails us your name, email address and message, so we can reply. We don't store them on the site, and keep the email only as long as we need it to help you. To keep out spam, the form uses Cloudflare Turnstile, described below.

When you use the Discord bot

When you use one of the bot's commands, Discord sends us the command and what you typed in it, your Discord user ID and the ID of the server you used it in. We use the IDs only to limit how many commands each person and server can send a minute, and forget them after that minute. We don't store the commands, and don't link them to a WoW Rep account. Discord handles everything else under its own privacy policy.

Payments

Premium payments are handled by Braintree, a PayPal service. Your card details go straight to Braintree and never reach our server. Braintree also receives your email address and keeps its own payment records, under its own privacy policy.

Advertising

Visitors without premium see ads from Google AdSense. Google and its partners use cookies to show ads based on your visits to this and other sites, and to measure them. How Google uses information from sites that use its services explains this, and Google's Ad Settings let you turn off personalized ads.

In the European Economic Area, the UK and Switzerland, Google asks for your consent before using cookies for personalized ads, and you can change your choice with "Privacy and cookie settings" at the bottom of the site menu. Premium members see no ads, and their pages don't load AdSense at all.

Analytics

Google Analytics tells us which pages people visit, where they come from, and how the premium page is used. It uses cookies, and doesn't receive your account or email address from us. The Google Analytics opt-out add-on stops it.

Cookies

• Ours: a session cookie and a security token (XSRF), which the site needs to work; a "remember me" cookie if you choose to stay signed in; and appearance and sidebar_state, which remember light or dark mode and whether the sidebar is open.
• Google's: Analytics and AdSense cookies, as described above.

Your browser's settings can block or delete cookies. Without the session cookie, you can't sign in.

Other services we use

• Blizzard: character, realm and item data, and the Battle.net sign-in for syncing characters.
• Wowhead: the item tooltips, which load from Wowhead's servers.
• Raider.IO: the Mythic+ runs on the Great Vault checklist. Our server asks it for the character's runs by region, realm and name; your browser doesn't contact it.
• Cloudflare Turnstile: checks that the contact form is sent by a person. It loads from Cloudflare's servers only on the contact page, and Cloudflare receives information about your browser and device, under its own privacy policy.
• Better Stack: reports of errors on our server. We set it up to send no IP addresses, accounts, cookies or form data.
• Amazon Web Services: hosting for the site and its database, in the United States.

How long we keep it

Your account information stays until you delete your account. Sessions expire after a period of inactivity. Synced characters (their names, realms, regions, levels and classes) stay until you delete your account, but we keep data from Blizzard for up to 30 days: we check synced characters against Blizzard at least that often and remove any it no longer has, and the data looked up for a character is cached for up to a day. Braintree, Google and the other services keep their own records under their own policies.

Data from Blizzard

Character, realm, item and other game data comes from Blizzard's API and is provided "as is", without any warranty that it's accurate, complete or available. Blizzard doesn't run or endorse this site.

Your choices and rights

• You can change your name, email address and password, or delete your account, in Settings when signed in. Deleting it removes your account, synced characters and Great Vault progress, cancels premium and deletes any card saved with Braintree.
• Email us to get a copy of your information, correct it or have it deleted, or to ask anything about this policy.
• Depending on where you live, such as the EEA or the UK, you may have further rights, including objecting to how your information is used and complaining to your data protection authority.

Children

WoW Rep isn't meant for children under 13, and we don't knowingly collect information from them.

Changes

If this policy changes, we'll update it here and change the date at the top.

Contact

Fusani Applications, brian.lamb@fusaniapplications.com.