Nine squares that fill as you clear raid bosses, Mythic+ keys and delves. Each row shows how far along it is and what the next slot pays, the best item level on offer, and a countdown to the reset.
Go to the Retail home page →
Once the vault has rolled, the addon sends what is on offer. Every item is set against what you are wearing, so "+20 over your legs" stands out, with the crests the upgrade costs and how many you hold.
Go to the Retail home page →
The Vault history tab keeps what your Great Vault offered each week, per character, newest first: every item with its item level, track and tooltip, and "Claimed" once the vault was emptied that week. Often it can go further and mark which one you took, worked out from what turned up in your gear and bags right after, but only when that leaves no doubt; otherwise it stays at "Claimed" rather than guessing. Kept for a year on your account; it starts with your first sync, earlier weeks were never kept.
Go to the Retail home page →
One line per character: open vault slots, item level, Mythic+ rating, crests per tier (red when you are at the cap and wasting them) and the nearest vault slot you could still finish.
Go to Characters →
Sign in with Battle.net and your characters are read from Blizzard: gear with Wowhead tooltips, this season's Mythic+ runs, renown and reputation. The addon adds your currencies, which Blizzard's API cannot give.
Go to Characters →
Pick the character you are playing from the plate under the game switch. Hover any item on the site, a vault reward or a piece on the roster, and a panel beside the tooltip shows what that character wears in the slot: item level and every stat, up or down. Rings, trinkets and weapons are set against both slots. Needs Battle.net connected, which is where the gear comes from.
Go to Characters →
Every source of gear side by side: what it drops, what the vault pays, on which upgrade track, and the crests each rank costs.
Go to Loot & iLvl →
Which tier pays what, how coffer keys gate the best loot, and what is new this patch.
Go to Delves →
Every class and spec with its role, and straight links to the guides, gear lists, Mythic+ and raid pages worth reading.
Go to Classes →
EU or US decides when your week rolls over, and the site counts down to your reset, not someone else's.
Go to Settings →Level and XP, rested XP, race and class, professions with their skill bars, item level, gold, time played, zone and when each one last synced. Sort any column, tag alts (Bank, Crafter, Leveler) and filter by tag. It also names the alt with the most rested XP.
Go to the Forever home page →
Click a character for its sheet: stats, every equipped item with its item level, reputation, skills, recipes, PvP rank, raid lockouts and history. Exactly as the addon read them in game.
Go to the Forever home page →
Each character's bags and bank as the game draws them: icons with stack counts, quality borders, grouped into consumables, crafting materials, quest items and the rest. The bank is as fresh as your last visit to it.
Go to the Forever home page →
The plate under the game switch opens a side panel with all your characters. Pick the one you are playing and it is remembered on every device. From there it is one click to its sheet, gear, bags, bank, recipes or reputation, and its equipped gear is right there.
Go to the Forever home page →
Hover any item on the site, in an alt's gear, a bag, the bank, a search result or a recipe, and a panel beside the tooltip shows what your current character wears in that slot: item level, stats and the classic equip bonuses (spell power, crit, hit, mana per 5), up or down. Rings and trinkets are set against both slots, a two-hander against main and off hand together.
Go to the Forever home page →
Type a name and see every character that has it, worn, in the bags or in the bank, and how many.
Go to the Forever home page →
Per faction, which of your characters stands best with it, and how far that one still is from the next standing.
Go to the Forever home page →
Every character's recipe lists read together. Who can craft this? What gives a skill-up next? A shopping list of reagents, with what your bags and banks already hold. Plus the best crafter per trade, what nobody covers yet, and a watchlist.
Go to the Forever home page →
Every level-up with its /played at the ding, gold over time, trades maxed and recipes learned, per character and for the whole account.
Go to the Forever home page →
A private summary at the top of the home page: what changed in the Forever build since you were last here, in PatchVault's own words, never Blizzard's; who joined or left your guild; and any friend's new recipes, level-ups or loot finds, for the friends who share that with you. Only you ever see it, and it moves forward the moment you do, so nothing repeats on your next visit.
Go to the Forever home page →
A Lockouts tab on the character sheet lists every raid an alt is still saved to this week: which bosses are already down, which are not, and when the ID resets, so you can see in one look which alt still has a run left in it instead of logging each one in to check.
Go to the Forever home page →The Reputation tab says how many days a faction has left to its next standing (Exalted, once you are Revered), worked out from that character's own past readings rather than guessed. It only shows a number once there is a real stretch of history behind it; too little of that, or a faction that has stopped moving, says so instead of a made-up estimate.
Go to the Forever home page →Which professions none of your characters has yet, so the next alt can fill the gap.
Go to the Forever home page →One read-only link to every character's professions, for a guild or a friend looking for a crafter: they search "who can make this" across all your alts. Or share just one character. You pick who is in it, gold, gear and bags never are, and stopping kills the link.
Go to the Forever home page →Every zone by level band and faction. Add your party by race and class and it suggests one route for all of you, from each starting zone to the first zone you share. Or build and save a route of your own.
Go to Forever Zones →
Every instance with its level range, group size and where it is, with Forever's new ones marked. Open one to see the gear each boss drops, as a card per boss: filter by armor type or weapons, hover an item for its tooltip and how it compares with what you wear. Pick the character you are playing and every upgrade for it is marked ("Upgrade for your legs, +12 ilvl"), with a list of the dungeons at its level that hold the most, and a filter to see nothing else. Where Forever's loot is not known yet, it says so. And real drops: what PatchVault players saw each boss drop, sent by the addon, next to Classic's numbers.
Go to Forever Dungeons & raids →
The flasks and potions to get before a pull, one checklist per confirmed raid. Every tick is yours, kept in your browser and synced with your account like the old checklist; nothing here is guessed from quest data, and a recipe Forever has not confirmed yet says so. Pick the character you are playing and it checks every slot that should carry an enchant against what the addon actually reported, reading straight off the item link rather than guessing.
Go to Forever Raid prep →
Every upgrade for the character you are playing, in one place. Gear already sitting on your own other characters (the addon now notes whether each item is Soulbound, so a Soulbound one is shown but never offered to move, only a tradeable one says "send from…"), dungeon and raid drops at your level (the same marks as on Dungeons and raids), and recipes real players have open on Crafters, each linking straight to a search for whoever has it.
Go to Forever Gear finder →
Trade a code with someone you trust and you are friends, permanently, on both sides. Friending never shares anything by itself: you see a friend's professions if their account-wide share is on, and a whole character (stats, gear, reputation, recipes, history, bags and bank) if they switch on "Share everything with my friends" for it. Hover their gear to compare it with yours. A friend can also switch on their loot finds, a short "who found what" feed of recent notable items per character, kept entirely apart from the anonymous drop totals on Dungeons and raids. Live, and gone the moment either of you switches it off or removes the other.
Go to Forever Friends →Find a player who can make what you need. Search every open profile in your region by character, profession and rank, or simply by the recipe or item, see all their recipes, and send them a message. Every profile has its own link to pass on, and it shows who is on it when you paste it in a chat. Your own profile is private until you open it from the home page.
Go to Forever Crafters →
Your guild on one page. The addon reads which guild you are in and the game's own member list, and a guildmate counts once another player's game lists them, so nobody joins by typing a name. Share your characters with a tick each and see everyone who shares side by side: rank, level, class, item level and professions, each character's gear and reputation, a sortable raid readiness view with an enchant-gaps column for the slots Classic-style play normally enchants, a "who can make this" search across the whole guild, and a Message button on each guildmate to write to them straight from their row.
Go to Forever Guild →
Write to a crafter, a friend or a guildmate right on the site. They see the character you write as, never your email or BattleTag, and get a short mail if they want one. Block or report anyone in one click.
Go to Forever Messages →PatchVault reads what the game itself shows: your vault, currencies, character sheet, bags and bank, and the recipes of every profession window you open. On Forever it also notes what bosses drop, never who gets it, for the loot cards. Type /pv, copy the line, paste it on the site.
For Windows. Pair it once with your account and it sends every character at each logout. Nothing to copy or paste, ever.
Go to Account →The site works without one: everything stays in your browser. With an account (email or Battle.net) it follows you to every device, and you can download or delete all of it from the Account page.
Go to Account →When a character's name changes, the site spots the old and new card and offers to merge them. Tags, history and recipes move over, on every device.
Put PatchVault on your phone's home screen or in your Start menu and it opens in its own window, like an app. The site offers it by itself. In Chrome or Edge you can also use the install button in the address bar; on an iPhone it is Share, then Add to Home Screen.
The preview shows the whole site with demo characters, for Retail and for Forever, before you install anything.
Go to Preview →Found a bug, missing something, or stuck? Send a message from the Feedback page, with or without an account. The answer shows up on that page, and by email if you want.
Go to Feedback →Short answers for when you are stuck: getting started, syncing with the desktop app, sharing, Crafters, Messages, Friends, and what to do when a character does not show up.
Go to Help →Every change to PatchVault that you can see or use, newest first, in plain words.
Go to What's new →No ads, no tracking of you across days, nothing sold. The privacy page lists every single thing that is stored and for how long.
Go to Privacy →Loading your characters…
What this site, its addon and its desktop app store, where, for how long, and who can see it.
PatchVault is a fan-made World of Warcraft reference run by one person. It is not a business, it sells nothing, and it has no interest in you beyond being useful. This page says exactly what is kept, and it is written from the code rather than from a template: if it says a number, that number is in the source.
Who is responsible. PatchVault is run by Ginkeltjes, one person in the Netherlands, who is responsible for everything on this page (the "controller", in privacy law). Questions, requests and complaints go to [email protected]; you get an answer within one month. You can also reach me on Bluesky.
Last updated: 27 September 2026.
You can use every page without signing up. What you tick, which entries and characters you track, your region, and anything you paste from the addon are kept in your browser's local storage, on your own device. They are not uploaded. Clearing your site data removes them, and so does the button on the Settings page.
Two things still reach the server without an account: the visit counter described under Counting visits, and, when you open the bags or bank of a pasted character, the item numbers, so the server can look up their icons. Those item numbers are not stored with anything about you; the server asks Wowhead about the item, not about you. And if you send feedback, that message is stored, as described under Feedback.
An account keeps your data on the server so it is the same on every device. This is what it holds:
If you sign in with or link Battle.net, the site asks Blizzard for the openid and wow.profile permissions. Blizzard never gives out your email address or password. The site stores:
Your Battle.net sign-in token is used once, to read the character list, and then thrown away. Everything after that is read with the site's own key. Unlinking Battle.net removes the link, the character list, the armory data and the pictures.
The addon runs inside the game and has no internet access. It writes one line per character to your WoW folder: the character sheet listed above, plus currencies, Great Vault progress, the recipes your professions know, and on WoW Forever which items the bosses you killed dropped (see Real loot, below).
The desktop app (Windows) reads those lines and sends them here, so your checklist fills itself in. To pair it you type a code from the Account page; the code works once, for ten minutes. The app then holds a device token that can only send data: it cannot read your checklist or change your account. When it pairs, it is told which account it joined (your email address or BattleTag) so it can show you.
On the server this stores:
On your computer the app keeps, in %LOCALAPPDATA%\PatchVault: the device token (encrypted with Windows' own protection for your user account), lines not yet sent, which WoW folders it watches, the device name, a list of recent syncs per character, and a log of at most about 4 MB that includes the email address or BattleTag it paired with. Nothing is written into your WoW folder. The version downloaded from this site asks, when you uninstall it, whether to delete that folder too; the Microsoft Store version's data is removed together with the app. The app contacts only this site. The version downloaded from here also checks this site for updates every six hours; the Microsoft Store version is updated by the Store.
You can share one character's professions, or all your characters' professions at once. A share link is public: anyone who has it can see the character's name and realm, level, class and race, profession ranks and the recipes it knows. How many reagents you carry is removed, and nothing else from the character (gold, gear, bags, where it is) is included. The account-wide link shows all your characters with a profession together, so anyone with it can see they belong to one person, except the ones you hide. Stopping a share deletes the link at once; sharing again makes a new one.
Link previews. When somebody pastes a share link or a Crafters profile link into a chat app or a social network, that app asks this site for the page and shows a preview of it. The preview names the characters on the link and shows a picture with, per character, the name, level, race, class, realm, profession ranks and how many recipes it knows: only what the link itself shows anyone who opens it. The server keeps a copy of that picture, with a note of which link it belongs to, outside the public part of the site. Stopping the share, closing the profile or deleting your account makes the picture unavailable at once, and the copy is deleted the next time anything asks for it, or at the latest 30 days after it was last asked for. What a chat app keeps of a preview it already showed is up to that app.
Download my data on the Account page gives you a copy of everything above, except Blizzard's character pictures, which you can see on the Roster page. Password and token hashes are never included.
Delete your account on the same page removes all of it immediately and permanently: address, password hash, synced data, Battle.net link, characters and pictures, devices, mailbox, vault history, share links and feedback you sent while signed in. Sign-in attempts that mention your address expire on their own after 30 days (see below). Deleting the account does not remove the desktop app's files on your computer; uninstall the app for that.
The server is backed up by the hosting provider: daily backups are kept for 14 days and monthly backups for a year. Deleted data can therefore remain in a backup for up to a year until it is overwritten. Backups exist to recover from a server failure; a deleted account is never put back into the site from one.
The Feedback page sends a message to the person running the site. With or without an account, this is stored:
/loot/. Nothing about your browser, and no IP address.Only the administrator reads feedback. The admin shows an account by number, never its address, and shows whether an answer can be mailed, not the address itself. Sending is limited to 10 messages an hour and 30 a day per network, counted with the same IP hash as sign-in attempts (see below).
A closed conversation is deleted 1 year after it was closed, and any other conversation 2 years after its last message. You can delete a conversation yourself at any time with Delete this conversation on the Feedback page; deleting your account deletes everything you sent while signed in. Feedback sent while signed in is part of Download my data.
The Friends page lets two accounts see each other by trading a short code. Redeeming a code is the whole handshake: there is no separate request-and-accept step, and it works both ways at once.
Becoming friends does not, by itself, share anything at all. It only shows you a friend's account-wide share (see Share links, above) if and when they have turned one on, read fresh every time the page is opened, exactly as it stands right now. If they have never turned account-wide sharing on, hide a character, or later stop sharing, the page shows that instead, at once. There are exactly two switches that decide what a friend can see: the account-wide share toggle, and the per-character switch described below. Friending itself is not a third one.
This is stored:
Either side can remove a friend at any time. This deletes the one row that connects the two accounts, and the view disappears for both of you at once, the same as if the share had been turned off. Redeeming a code twice fails the second time, the same as a used pairing code. Invite and redemption attempts are logged the same throttled, IP-hash-only way as sign-in attempts (see Sign-in and pairing attempts, below) and are deleted after the same 30 days.
Separately from the account-wide share, you can switch on Share everything with my friends for a single character. It is off for every character until you turn it on. While it is on, every account you are friends with (and no one else: there is no link) can open that character's whole sheet, read from your account at the moment they look: level, race, class, faction, realm, stats, gear with item levels, reputation, skills, recipes, PvP rank, the character's own history on the site (level-ups, maxed professions, new recipes, gold over time), bags and bank, gold, played time, zone, rested XP and level progress. You can keep its gold, its bags and bank (the reagent counts on its recipes go with them) or its zone out of that. Your other characters, your email address, BattleTag, devices and everything else of your account are never part of it. A friend you blocked on Messages, or who blocked you, gets nothing.
This is stored: which characters you switched on and what each keeps private. Nothing is copied to your friends. Switching it off, forgetting the character, removing the friend or a block takes effect on their next look. Opening a friend's character is throttled per IP hash, logged the same way as invite attempts and deleted after the same 30 days.
Deleting your account removes your friendships, your private labels for them, any live invite code and which characters you shared whole, immediately. Download my data includes which of your friends are which internal account and your label for each, never their email address or BattleTag, and which characters you share whole with what each keeps private.
Crafters is a directory of profiles that their owners chose to open. Nobody is in it unless they opened their profile, with the button on the home page or on Crafters itself, and closing it takes you out at once.
An open profile shows, per character you leave ticked: its name, realm, region, faction, level, race and class, its profession ranks, and the names of the recipes it knows. That is the same as the account-wide share link shows. It never shows gold, gear, bags, the bank, where the character is, your email address or your BattleTag. You can also add one line of text of your own.
Anybody can search Crafters, signed in or not. Searches are limited per network, counted the same IP-hash-only way as sign-in attempts and deleted after the same 30 days, so the directory is not something to copy in bulk. Search results are not offered to search engines. Every open profile has its own link, which opens it on this page; opening one counts towards the same limit as searching, and it is not offered to search engines either. Pasted in a chat, it shows a preview, as described under Share links.
This is stored while your profile is open: that it is open, a random public handle for it (never your account number), which characters you left out, your line of text, and a search index built from your synced characters. Closing the profile deletes all of it.
Which region a character is in comes from the addon (version 1.12.5 and later), which reads it from the game. For characters synced before that, the region set on your account is used. Crafters and Friends only show characters in the region you are looking at.
Signed in, you can write to anybody with an open profile and to your friends, and they can answer. The other side sees you as the character you chose to write as, never your email address or BattleTag. If that is one of your synced characters it says so; if you typed a name, it says it was typed.
This is stored: the conversation (who the two accounts are, the character names each side shows, what it is about, and every message with the time it was sent), when each side last read it, and whether you want a mail when somebody writes. The mail names the character who wrote and links to the site; it never contains the message. You can turn it off on the Messages page.
A conversation is deleted one year after its last message. Deleting it on your side hides it for you; once both sides have deleted it, it is gone. You can block a player: they are not told, cannot write to you any more, and you stop seeing each other on Crafters. You can report a conversation: it is then sent, as a feedback message (see Feedback, above), to the site's admin, who reads it, and the player is blocked. That report is kept like any other feedback. Messages and new conversations are limited per network, the same IP-hash-only way as sign-in attempts.
Deleting your account deletes your open profile, its index, your blocks and every conversation you are in, for both sides. Download my data includes your profile and all your conversations.
On WoW Forever the addon (version 1.14.0 and later) notes which guild each character is in, with the name and number of its rank, and the guild's member list as the game's Guild window shows it: per member the name, rank, level and class. It never reads the public or officer notes, where anybody is, or when they were last online. Only the desktop app sends the member list.
On the server, the member list is not kept as it came. Only each member's name in lower case and their rank number are kept, with the guild's rank names and how many members it has, and only to check who is in the guild: a character counts as a member of a guild on PatchVault only when it is on the member list another account's character in that guild sent. The newest list per character replaces the one before, and a list is deleted 60 days after it was read in game. Nobody else can see the lists themselves; they are never shown on the site.
Nobody sees your characters on the Guild page unless you turn sharing on there. Then guildmates who are confirmed the same way see, per character you leave ticked: its name, realm, level, class, race, rank in the guild, equipped gear with item levels, reputation, profession ranks and recipe names. Never gold, bags, the bank, where the character is, played time, your email address or your BattleTag. Players you blocked in Messages, or who blocked you, do not see each other there. Stopping deletes the setting at once.
This is stored: whether you share and which characters you left out, which guild each of your synced characters is in (worked out from your mailbox and checked against it every time), and the member lists your characters sent. Deleting your account, or forgetting a character on the site, deletes them; Download my data includes all three.
On WoW Forever the addon (version 1.13.0 and later) notes, in dungeons and raids, which items each boss you kill drops, so the Dungeons & raids page can show real drops next to Classic's numbers. Per kill it records: the boss (the game's encounter id and the boss's creature ids), the instance and its difficulty, the time, the game's build number, a checksum of the boss's game id (the same for everyone in your group, so one kill seen by five players counts once), and per item its id, how many dropped and its quality. It reads the item links from the loot window, loot rolls and the loot lines in chat, and never records who looted anything: no player names, no group, no chat text beyond the item link. On an English game client it also sends the boss's and the dungeon's name, for bosses the site has no list of yet. The addon keeps the last 14 days of kills on your computer, and only the desktop app sends them; the line you copy by hand does not carry them.
On the server that line is not kept in your mailbox. It is read at once and every kill is merged into one row per kill that has no account, character or name on it, only what is listed above. To stop the same kill from being counted twice and to limit how many kills one account can add in a day (80), each kill also remembers who already reported it, as a keyed hash of your account number that cannot be turned back into it. That hash is deleted, the checksum removed and the time cut to the day 30 days after the kill; the anonymous kill itself is kept, because it is what the totals are made of.
What the site shows, to anybody, is only totals per boss: how many kills were seen, how often each item dropped, and the first and last day it was seen. Deleting your account does not remove kills you reported, because nothing connects them to you once the hash is gone; within the first 30 days, write to the address above and they are removed.
Signing in sets a cookie, pv_sess, holding a random token. The database stores only a SHA-256 of it. It lasts ninety days from the last time you used the site, and is marked HttpOnly and SameSite=Lax.
pv_acct holds only 1 and tells the page to show you as signed in. pv_admin does the same for the site's administrator. Neither grants any access. The admin panel has its own session cookie, pvsid, used only by the person running the site.
The site sets no other cookies. For Wowhead's script, see Other people's servers.
Every sign-in, sign-up, password reset, password change and account-deletion attempt is logged with the time, the email address typed, and a keyed hash of your IP address, so repeated failures can be slowed down. The IP address itself is never stored. Pairing attempts and syncs from the desktop app are logged the same way, with the IP hash and no address, and so is each feedback message sent and each friend invite or redemption, with only the time and the IP hash, never the message or the code. These rows are deleted after 30 days.
The site counts its own visits, without cookies and without any outside service. It records the page path, the patch, whether an addon line was imported or the addon downloaded (and how many entries), whether you were signed in at the time (yes or no, not which account), and a visitor hash. That hash is made from your IP address and browser string, salted with a key that changes every day, so two visits on the same day group together and nothing links you from one day to the next. These rows are deleted after 400 days.
While a page is open in a visible tab, it tells the server once a minute that it is still open: the page path, the same visitor hash, and whether you are signed in. One row per visitor, overwritten each minute and deleted 15 minutes after the last one.
The administrator sees these as counts, as one row per visit per day, and per account number as dates, sign-in method, number of characters and devices. The admin pages show no email address, BattleTag or character name.
[email protected], through the mail delivery service SMTP2GO. It sees the address and the message it delivers, and its own privacy policy applies.Fonts are hosted here rather than at Google.
No advertising, no analytics service, no selling of anything, no fingerprinting, no profiling and no automated decisions about you. Nothing is shared beyond the services named above and the share links you make yourself.
You can see, take away and delete your data from the Account page without asking anyone. For anything else, such as changing your email address, correcting, restricting or objecting, or a question about this page, write to [email protected]. If you think your data is handled wrongly, you can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.