PatchVault
Not signed in. The characters you paste, your lists and your settings are kept in this browser only, and disappear if you clear your site data or switch device. Sign inCreate an account
The fine print

Privacy

About this page

What this site, its addon and its desktop app store, where, for how long, and who can see it.

PatchVault is a fan-made World of Warcraft reference run by one person. It is not a business, it sells nothing, and it has no interest in you beyond being useful. This page says exactly what is kept, and it is written from the code rather than from a template: if it says a number, that number is in the source.

This page is also offered in German, French and Spanish. Those are translations for your convenience: where one differs from the English, the English text applies.

Who is responsible. PatchVault is run by Ginkeltjes, one person in the Netherlands, who is responsible for everything on this page (the "controller", in privacy law). Questions, requests and complaints go to [email protected]; you get an answer within one month. You can also reach me on Bluesky.

Last updated: 23 October 2026.

Without an account

You can use every page without signing up. Which characters you track, your region, what you mark on a page (such as Great Vault slots or the raid prep list), routes and watchlists you save, and anything you paste from the addon are kept in your browser's local storage, on your own device. They are not uploaded. Clearing your site data removes them, and so does the button on the Settings page.

Two things still reach the server without an account: the visit counter described under Counting visits, and, when you open the bags or bank of a pasted character, the item numbers, so the server can look up their icons. Those item numbers are not stored with anything about you; the server asks Wowhead about the item, not about you. And if you send feedback, that message is stored, as described under Feedback.

With an account

An account keeps your data on the server so it is the same on every device. This is what it holds:

  • Your email address, if you signed up with one. Used to sign in, to send a password reset, and for a few getting-started mails: a welcome right after you sign up, one reminder a few days later if no character has come in, and three mails around the WoW Forever launch (when the beta ends, a week before and on launch day). Each is sent once, and each has a link to stop them. Now and then there may also be one mail to everyone with news worth knowing, such as a thank-you when the beta ended; it has the same link, and turning these mails off stops those too. There is no newsletter. Accounts made through Battle.net start without an email address and without a password, so they get none of these until their owner adds an address on the Account page. That address goes on the account only after the link we mail to it is opened; until then it waits for a day, then it is gone.
  • Your beta recap, if you played the WoW Forever beta: when the beta characters are cleared, a copy of yours is kept as they were at the end, so you can look back on them. Only you can see it. Delete it on its page; it is also in Download my data.
  • What you told us through a getting-started mail's link, if you used it: which of the five reasons held you back, and whether you turned these mails off. The account page of the administrator shows both, and which of these mails went out when.
  • A hash of your password, if you set one. Argon2id, 64 MB of memory and four passes. A hash cannot be turned back into your password.
  • Your region, Europe or Americas, because it decides when your week resets.
  • On which days you used it: the last day, the day before that, and on how many days in all, whether on the site or through the addon or desktop app syncing. Only so the administrator can count how many accounts come back; the admin pages show totals per day, never who.
  • What the site keeps in your browser, synced. What you mark on a page per patch (such as Great Vault slots and the raid prep list, with tracked and hidden entries), which characters you track and their classes and tags, and for every character the addon has reported: its character sheet (level, class, race, gender, experience, gold, time played, zone, stats, gear, bags, bank, reputations, skills and PvP rank), a short history of level-ups, gold and new recipes, and your recipe watchlist.
  • The date you signed up and the date you last signed in.

Battle.net

If you sign in with or link Battle.net, the site asks Blizzard for the openid and wow.profile permissions. Blizzard never gives out your email address or password. The site stores:

  • your Battle.net account id and BattleTag (refreshed each time you sign in), and the date you linked them;
  • the list of your World of Warcraft characters in the site's region: name, realm, level, class and faction;
  • for the characters you track, what Blizzard's public armory says about them: item level, specialization, when the character last logged in, equipped gear, reputations, this season's Mythic+ runs, and Blizzard's picture of the character, which is stored on this server so it can be shown to you. It is re-read at most every 15 minutes when you ask, and the picture every week.

Since 6 November 2026 the same sign-in also reads your WoW Forever characters (both regions): first name, surname, level, class, race and faction. For each of them the site reads what Blizzard's public armory says: level and experience, equipped gear, stats, reputations, profession ranks and known recipes, PvP rank and honorable kills, talents, achievement points, how many quests, mounts and pets it has, its ruleset and guild, and when it last logged in. This lands among your synced characters, as if the addon had sent it: a character the addon also sends is filled in when Battle.net has the newer reading, and bags, bank, money and played time still only come from the addon. It is re-read at most every hour when you open My characters, or when you press Refresh.

Your Battle.net sign-in token is used once, to read the character lists, and then thrown away. Everything after that is read with the site's own key. Unlinking Battle.net removes the link, the character lists, the armory data, the pictures and the WoW Forever characters only Battle.net gave.

The desktop app and the addon

The addon runs inside the game and has no internet access (it talks to your guild in the game, see Guild crafters in the game, below). It writes one line per character to your WoW folder: the character sheet listed above, plus currencies, Great Vault progress, the recipes your professions know, and on WoW Forever which items the bosses you killed dropped (see Real loot, below).

The desktop app (Windows) reads those lines and sends them here, so your characters stay up to date by themselves. To pair it you type a code from the Account page; the code works once, for ten minutes. The app then holds a device token that can only send data: it cannot read what the site keeps for you or change your account. When it pairs, it is told which account it joined (your email address or BattleTag) so it can show you.

On the server this stores:

  • The device: a name (your computer's name unless you change it when pairing), when it was paired, when it last synced (to the hour) and how many times it sent something. Only a SHA-256 of its token is kept. Unpairing a computer deletes all of this.
  • The mailbox: the latest line from each character, exactly as the addon wrote it, at most 200 per account. The desktop app fills it, and so does a line from /pv that you paste on the site while signed in (with addon 1.22.3 and later that paste carries the same lines the app sends). It stays until you forget that character or delete your account.
  • Great Vault history (Retail): per character and reset week, the items the Great Vault offered (item, item level, quality, upgrade track, which vault row and slot), when they were first and last seen, and whether the vault was emptied later that week. It is taken from the lines the desktop app sends and from lines you paste on the home page while signed in. Each week is kept for 52 weeks, and goes sooner when you forget that character or delete your account.

On your computer the app keeps, in %LOCALAPPDATA%\PatchVault: the device token (encrypted with Windows' own protection for your user account), lines not yet sent, which WoW folders it watches, the device name, a list of recent syncs per character, and a log of at most about 4 MB that includes the email address or BattleTag it paired with. Nothing is written into your WoW folder. The version downloaded from this site asks, when you uninstall it, whether to delete that folder too; the Microsoft Store version's data is removed together with the app. The app contacts only this site. The version downloaded from here also checks this site for updates every six hours; the Microsoft Store version is updated by the Store.

Share links

You can share one character's professions, or all your characters' professions at once. A share link is public: anyone who has it can see the character's name and realm, level, class and race, profession ranks and the recipes it knows. How many reagents you carry is removed, and nothing else from the character (gold, gear, bags, where it is) is included. The account-wide link shows all your characters with a profession together, so anyone with it can see they belong to one person, except the ones you hide. Stopping a share deletes the link at once; sharing again makes a new one.

Link previews. When somebody pastes a share link or a Crafters profile link into a chat app or a social network, that app asks this site for the page and shows a preview of it. The preview names the characters on the link and shows a picture with, per character, the name, level, race, class, realm, profession ranks and how many recipes it knows: only what the link itself shows anyone who opens it. The server keeps a copy of that picture, with a note of which link it belongs to, outside the public part of the site. Stopping the share, closing the profile or deleting your account makes the picture unavailable at once, and the copy is deleted the next time anything asks for it, or at the latest 30 days after it was last asked for. What a chat app keeps of a preview it already showed is up to that app.

Seeing and deleting it

Download my data on the Account page gives you a copy of everything above, except Blizzard's character pictures, which you can see on the Roster page. Password and token hashes are never included.

Delete your account on the same page removes all of it immediately and permanently: address, password hash, synced data, Battle.net link, characters and pictures, devices, mailbox, vault history, share links and feedback you sent while signed in. Sign-in attempts that mention your address expire on their own after 30 days (see below). Deleting the account does not remove the desktop app's files on your computer; uninstall the app for that.

The server is backed up by the hosting provider: daily backups are kept for 14 days and monthly backups for a year. Deleted data can therefore remain in a backup for up to a year until it is overwritten. Backups exist to recover from a server failure; a deleted account is never put back into the site from one.

Feedback

The Feedback page sends a message to the person running the site. With or without an account, this is stored:

  • What you wrote, the kind you picked (bug, idea, question or other), and every reply after it, from either side. Plain text, at most 4,000 characters per message.
  • Which game it is about (Retail or WoW Forever) and the page on this site you came from, such as /loot/. Nothing about your browser, and no IP address.
  • If you are signed in, which account sent it. Answers then show up on the Feedback page, and a mail goes to your account's address to say there is one. An account made through Battle.net with no address yet is asked for one with the message, kept with that message and used only to tell you there is an answer (and, if you tick the box, mailed a link to add it to your account).
  • If you are not signed in, the email address you leave, used only to tell you there is an answer. You get a private link instead of an account; only a SHA-256 of it is stored, and your browser keeps the link in its local storage so the page can show your messages. Each answer mailed to you carries a fresh link of its own.
  • When each message was sent, and whether the conversation is waiting, answered or closed.

Only the administrator reads feedback. The feedback inbox shows an account by number and whether an answer can be mailed, not the address itself. Sending is limited to 10 messages an hour and 30 a day per network, counted with the same IP hash as sign-in attempts (see below).

A closed conversation is deleted 1 year after it was closed, and any other conversation 2 years after its last message. You can delete a conversation yourself at any time with Delete this conversation on the Feedback page; deleting your account deletes everything you sent while signed in. Feedback sent while signed in is part of Download my data.

Armory

Every WoW Forever character synced to your account has a public Armory page by default since 9 October 2026, at an address with its region, realm type and name. Anyone can open it. It shows the character's name, realm type, faction, level, race, class, item level, gear, stats, reputation, skills, profession ranks, recipes and PvP rank, as last synced. Never gold, bags, the bank, where it is, played time, rested XP, lockouts, history, loot finds or reagent counts, and nothing on it says which account or which other characters it belongs to.

Since 6 November 2026 every other WoW Forever character has an Armory page too, from Blizzard's public armory (the same data Blizzard's own armory shows), at an address with its region, realm type and name: level, class, race, faction, guild, item level, gear, stats, reputation, profession ranks and known recipes, PvP, talents, achievement points and when it last logged in. As on Blizzard's armory there is no opting out of it; turning your own PatchVault page off keeps the addon's extras off it. These pages are not listed by search engines or in the sitemap, and only somebody signed in can have one read again from Battle.net or look a name up there. The Armory search finds them by part of a name among the characters the site already knows from Battle.net. Since 9 November 2026 such a page also shows Blizzard's picture of the character; your browser loads it straight from Blizzard's image server (render.worldofwarcraft.com), which so sees your IP address, as it would on Blizzard's own armory.

Once the character has synced again on a later day, the page is listed in the Armory search on this site, in its sitemap and may be listed by search engines. Until then it opens only for someone who has the address. For that search the server keeps a short index of what the page shows at its top anyway (name, realm, level, class, race and faction), made again at every sync and gone with the page. The search counts how many guilds the listed characters are in, as a number only (under five it says "fewer than 5"); it never names a guild or says who is in one.

Turn a page off at the top of the character's sheet on My characters, or all of them at once with the notice that explains the change. Turning off takes the page down at once and it stays off after new syncs. The server keeps which characters you turned off, and whether you answered the notice, until you delete your account; both are part of Download my data. Retail characters never get a page.

Friends

The Friends page lets two accounts see each other, by accepting an invite link or by trading a short code. Accepting is the whole handshake: there is no separate request step, and it works both ways at once.

What a friend sees of you is decided by you, in one of two ways. By default a friend gets your standard settings: your account-wide share (see Share links, above) if you turned one on, plus the per-character switches described below, which since 2 October 2026 are on by default for your WoW Forever characters (see Sharing a whole character with friends). Or you choose for that one friend ("What they see" on their card): per character, whether they see its professions, its whole sheet and its loot finds, the same for characters you sync later, and what whole sheets keep private. Either way it is read fresh every time they open the page, exactly as it stands right now, so a change takes effect at once. Only people you made friends with see any of it, never anybody else.

This is stored:

  • An invite code, while it is live: a hash of it, not the code itself. It works once, expires after 30 minutes, and asking for a new one retires the old.
  • Your invite link, if you made one: its random address, the one character you chose to show on it (or none), what people who join through it get to see, and how many accepted it. Anyone you give the link to can see that character's name, level, race, class, realm and faction, and which kinds of things joining shows; the link's preview picture shows the same. Never your email address, BattleTag or anything else. Making a new link retires the old address; stopping it deletes it.
  • What you chose per friend, for friends you did not leave on your standard settings: per character which of professions, whole sheet and loot finds that friend sees, and what whole sheets keep private.
  • The friendship: which two accounts it connects, whose invite link made it (if one did), and the private label each side may give the other. Your label for a friend is visible only to you; they are never shown it, and neither of you is ever shown the other's email address or BattleTag.

Either side can remove a friend at any time. This deletes the one row that connects the two accounts, with what each of you chose for the other, and the view disappears for both of you at once, the same as if the share had been turned off. Redeeming a code twice fails the second time, the same as a used pairing code. Invite and redemption attempts are logged the same throttled, IP-hash-only way as sign-in attempts (see Sign-in and pairing attempts, below) and are deleted after the same 30 days.

Sharing a whole character with friends

Separately from the account-wide share, there is Share everything with my friends for each character, and Share my loot finds with friends (a short list of recent notable items, with the boss or dungeon and roughly when). Since 2 October 2026 both are on by default for WoW Forever characters, with gold, bags and bank, and zone kept private, because adding a friend is already a choice both of you make. You can switch any character off, keep less or more private per character, choose per friend, or turn the default off for every character you never switched (on the Friends page, or on the one-time notice that explains it). Retail characters are never on by default. While it is on, every friend on your standard settings (and any friend you chose it for; no one else, there is no link) can open that character's whole sheet, read from your account at the moment they look: level, race, class, faction, realm, stats, gear with item levels, reputation, skills, recipes, PvP rank, the character's own history on the site (level-ups, maxed professions, new recipes, gold over time), bags and bank, gold, played time, zone, rested XP and level progress. You can keep its gold, its bags and bank (the reagent counts on its recipes go with them) or its zone out of that. Your other characters, your email address, BattleTag, devices and everything else of your account are never part of it. A friend you blocked on Messages, or who blocked you, gets nothing.

This is stored: which characters you switched on or off and what each keeps private, and whether you turned the default off and answered the notice. Nothing is copied to your friends. Switching it off, forgetting the character, removing the friend or a block takes effect on their next look. Opening a friend's character is throttled per IP hash, logged the same way as invite attempts and deleted after the same 30 days.

Deleting your account removes your friendships, your private labels for them, any live invite code, your invite link, what you chose per friend (and what they chose for you), which characters you shared whole and which share their loot finds, immediately. Download my data includes which of your friends are which internal account and your label for each, never their email address or BattleTag, which characters you share whole with what each keeps private, which share their loot finds, what you chose per friend, and your invite link.

Crafters

Crafters is a directory of profiles that their owners chose to open. Nobody is in it by name unless they opened their profile, with the button on the home page or on Crafters itself, and closing it takes your name out at once. Players without an open profile are counted without a name, as described under Anonymous requests below, unless they turn that off.

An open profile shows, per character you leave ticked: its name, realm, region, faction, level, race and class, its profession ranks, and the names of the recipes it knows. That is the same as the account-wide share link shows. It never shows gold, gear, bags, the bank, where the character is, your email address or your BattleTag. You can also add one line of text of your own.

Anybody can search Crafters, signed in or not. Searches are limited per network, counted the same IP-hash-only way as sign-in attempts and deleted after the same 30 days, so the directory is not something to copy in bulk. Search results are not offered to search engines. Every open profile has its own link, which opens it on this page; opening one counts towards the same limit as searching, and it is not offered to search engines either. Pasted in a chat, it shows a preview, as described under Share links.

This is stored while your profile is open: that it is open, a random public handle for it (never your account number), which characters you left out, your line of text, and a search index built from your synced characters. Closing the profile deletes all of it.

Anonymous requests

Since 2 October 2026, if you sync WoW Forever characters with recipes and your profile is not open, your recipes count on Crafters without a name. Somebody who searches for a recipe you know sees only "1 crafter on your realm (your faction) can make this": the recipe, the realm, the faction and how many players. Never your character's name, class or level, and never anything else. Signed in, they can send that group of crafters a request (it goes to at most five of them, and each player can send five requests a day). It arrives in your Messages with the character it was sent to. They see who they are writing as; they only see who you are if you answer. Ignoring or deleting a request tells them nothing.

This is on unless you turn it off, because it shows nothing that points to you. Turn it off on Crafters (under Your profile) or on the one-time notice that explains it: you are then no longer counted and nobody can ask you. Your own account and players a block stands between never see each other here.

This is stored: whether you turned it off and whether you answered the notice, and the same search index as for an open profile, built from your synced characters and used only for these counts and for finding who a request goes to. Turning it off deletes the index at once.

Which region a character is in comes from the addon (version 1.12.5 and later), which reads it from the game. For characters synced before that, the region set on your account is used. Crafters and Friends only show characters in the region you are looking at.

Messages

Signed in, you can write to anybody with an open profile and to your friends, send an anonymous request to crafters (see Anonymous requests above), and they can answer. The other side sees you as the character you chose to write as, never your email address or BattleTag. If that is one of your synced characters it says so; if you typed a name, it says it was typed.

This is stored: the conversation (who the two accounts are, the character names each side shows, what it is about, and every message with the time it was sent), when each side last read it, and whether you want a mail when somebody writes. The mail names the character who wrote and links to the site; it never contains the message. You can turn it off on the Messages page.

A conversation is deleted one year after its last message. Deleting it on your side hides it for you; once both sides have deleted it, it is gone. You can block a player: they are not told, cannot write to you any more, and you stop seeing each other on Crafters. You can report a conversation: it is then sent, as a feedback message (see Feedback, above), to the site's admin, who reads it, and the player is blocked. That report is kept like any other feedback. Messages and new conversations are limited per network, the same IP-hash-only way as sign-in attempts.

Deleting your account deletes your open profile, its index, your choice about anonymous requests, your blocks and every conversation you are in, for both sides. Download my data includes your profile, that choice and all your conversations (a crafter who has not answered your request shows there as "A crafter", as on the page).

Guild crafters in the game

Since addon 1.24.0 your characters can tell your guild, inside the game, what their professions make. This never reaches PatchVault's server: it goes over the game's hidden addon channel to guildmates who run the addon too. Per character it sends the name and realm, class and level, each profession's rank, and which items and enchants it can make, as read when you opened that profession's window. Nothing else: no gear, bags, gold, notes or where you are.

Guildmates' addons keep what they heard on their own computer, for up to 60 days after they last heard it, and pass it on to guildmates who log in while you are offline. Anybody in the guild with an addon listening on that channel can read it, so it is as private as your guild. Turn it off on the addon's Extras tab or with /pv extras guild; from then on your characters send nothing and the addon ignores what others send.

Guild calendar

Since 7 November 2026 the Guild page has a Calendar. Guildmates who are confirmed the same way see its events. For each event the server keeps the guild it belongs to, its name, kind, instance, start, length, group size, how many tanks, healers and damage it wants, the lowest level, when sign-ups close, the note, and the name of the character that planned it.

When you sign up it keeps which of your characters, with its name, class and level, your answer (coming, maybe or not coming), the role you picked, your note, and the leader's decision with the name of the character that made it. Your guild's leaders and everyone who sees the event see your sign-up.

Per guild it also keeps what the guild master set: which ranks, and which named guildmates, may plan events and accept sign-ups, and who is on auto-confirm, with the name of the leader who set it. Deleting your account deletes your sign-ups; events you planned stay for your guild, without your account behind them. Download my data includes your sign-ups and the events you planned.

Guild

On WoW Forever the addon (version 1.14.0 and later) notes which guild each character is in, with the name and number of its rank, and the guild's member list as the game's Guild window shows it: per member the name, rank, level and class. It never reads the public or officer notes, where anybody is, or when they were last online. The desktop app sends the member list, and so does a paste of the /pv line while you are signed in (addon 1.22.3 and later).

On the server, each member's name, rank, level and class are kept, with the guild's rank names and how many members it has. They are used for two things. First, to check who is in the guild: a character counts as a member of a guild on PatchVault only when it is on the member list another account's character in that guild sent. Second, since 5 November 2026, the Guild page shows the whole member list to guildmates who are confirmed that way, as the game's own Guild window shows it to every member: name, rank, level and class, nothing more. Nobody outside the guild sees it, and it never says whether someone uses PatchVault unless they share with the guild. The newest list per character replaces the one before, and a list is deleted 60 days after it was read in game.

Since 6 November 2026 the member list also comes from Battle.net, the same list Blizzard's public armory shows: once somebody in the guild has signed in with Battle.net, or a guildmate opens the Guild page, the site reads it at most every hour, and from level 10 on each member's public profile at most twice a day: level, item level, gear, profession ranks and when they last logged in. Blizzard's list confirms everybody on it. On the Guild page the rest of the guild then shows item level and professions too, and a guildmate who uses PatchVault gets their level, gear and professions brought up to date when Battle.net has the newer reading. This is kept once for the whole site, not per account, and nothing of it is shown outside the guild.

On the Guild page there are two levels. Since 2 October 2026 the basics are shared by default: guildmates who are confirmed the same way see each of your characters' name, realm, level, class, race, rank in the guild, equipped gear with item levels and enchants, and profession ranks, much of which the game itself shows a guild. You can turn the basics off on the Guild page or on the one-time notice that explains it; then guildmates see nothing of you there, not even that you use PatchVault. Sharing everything stays your choice: turn it on and, per character you leave ticked, they also see its reputation and recipe names. Never gold, bags, the bank, where the character is, played time, your email address or your BattleTag. Players you blocked in Messages, or who blocked you, do not see each other there. Changes take effect at once.

This is stored: whether you share everything and which characters you left out, whether you turned the basics off and answered the notice, which guild each of your synced characters is in (worked out from your mailbox and checked against it every time), and the member lists your characters sent. Deleting your account, or forgetting a character on the site, deletes them; Download my data includes all three.

Population

The Population page shows how many WoW Forever characters synced to PatchVault there are per region and realm type, by class, race, faction, level band and profession. It is counted from the same synced characters as everything else, as totals only: no name, no account and nothing else that points to a player. A number under five is never shown, not even by working it out from the others: next to such a number, the next smallest one shows only as "5 or more", and a realm with fewer than five characters is folded into "realms too small to list". Nothing extra is stored for it, apart from the page's totals, kept for a few minutes. There is no switch, because nothing in it belongs to anybody.

Seen in game

Since addon 1.23.0 the page also counts WoW Forever players that people with the addon met in the game, so it is not limited to PatchVault's own users. The addon notes a player only when the game already shows them to you: you target or hover them, their nameplate appears, or they are in your group. Since addon 1.24.33 it also reads the results of a /who that you type yourself (or that another addon of yours runs). It never asks the game for anyone by itself: it never sends a /who and never inspects. Per player it keeps: a checksum of the game's id for that character, a checksum of its name and realm, its realm, level, class, race and faction, and when it was last seen. Never a name, a guild, where they were or anything they said. The addon keeps 14 days of this on your computer; the desktop app sends it, and so does the line from /pv when you paste it on the site while signed in.

A /who result has no game id, so the name checksum is what lets a player you find with /who and later meet in person count once instead of twice. It is weaker than the id checksum: it cannot be turned back into a name, but someone who already knows a character's name and realm could work out its checksum and check whether the addon sent that character. On the server it is turned into a tag with the server's own key, like the id checksum, so the rows kept there cannot be checked that way.

On the server that line is not kept in your mailbox. Each player becomes one row with no name on it: the checksum is turned into a tag with a key only the server has, so the same player met by ten people counts once, and the tag cannot be turned back into the character, not even by someone who knows the game's id for it. A row also notes, as a keyed hash that cannot be turned back into it, which account sent it first, only so a flood of made-up players can be removed, and how many new players one account added that day (at most 5000). The page counts the players seen in the last 45 days, with the same "fewer than 5" rule as above. A row is deleted 60 days after the player was last seen, and the beta's rows go with the beta on launch day.

You can turn it off in the game on the addon's Extras tab, or with /pv extras census: then nothing is noted and nothing is sent. A player who does not use PatchVault has no account here to ask about, and no row says who they are; there is nothing to look up or delete per player.

Real loot

On WoW Forever the addon (version 1.13.0 and later) notes, in dungeons and raids, which items each boss you kill drops, so the Dungeons & raids page can show real drops next to Classic's numbers. Per kill it records: the boss (the game's encounter id and the boss's creature ids), the instance and its difficulty, the time, the game's build number, a checksum of the boss's game id (the same for everyone in your group, so one kill seen by five players counts once), and per item its id, how many dropped and its quality. It reads the item links from the loot window, loot rolls and the loot lines in chat, and never records who looted anything: no player names, no group, no chat text beyond the item link. On an English game client it also sends the boss's and the dungeon's name, for bosses the site has no list of yet. The addon keeps the last 14 days of kills on your computer. The desktop app sends them, and from addon 1.22.3 so does the line you copy from /pv when you paste it on the site while signed in. Pasted without an account, they are left out: the browser does not keep them and nothing is sent.

On the server that line is not kept in your mailbox. It is read at once and every kill is merged into one row per kill that has no account, character or name on it, only what is listed above. To stop the same kill from being counted twice and to limit how many kills one account can add in a day (80), each kill also remembers who already reported it, as a keyed hash of your account number that cannot be turned back into it. That hash is deleted, the checksum removed and the time cut to the day 30 days after the kill; the anonymous kill itself is kept, because it is what the totals are made of.

What the site shows, to anybody, is only totals per boss: how many kills were seen, how often each item dropped, and the first and last day it was seen. Deleting your account does not remove kills you reported, because nothing connects them to you once the hash is gone; within the first 30 days, write to the address above and they are removed.

Sessions and cookies

Signing in sets a cookie, pv_sess, holding a random token. The database stores only a SHA-256 of it. It lasts ninety days from the last time you used the site, and is marked HttpOnly and SameSite=Lax.

pv_acct holds only 1 and tells the page to show you as signed in. pv_admin does the same for the site's administrator. Neither grants any access. The admin panel has its own session cookie, pvsid, used only by the person running the site.

pv_lang is set only when you pick a language in the menu or on the language hint, holds just that choice (en, de, fr or es), and lasts a year. The same choice is kept in your browser's storage so every page opens in that language. When you are signed in, the language is also stored on your account, and a feedback message remembers the language it was written in, so that a mail to you (a message notice, an answer to feedback) is written in it.

The site sets no other cookies. For Wowhead's script, see Other people's servers.

Sign-in and pairing attempts

Every sign-in, sign-up, password reset, password change and account-deletion attempt is logged with the time, the email address typed, and a keyed hash of your IP address, so repeated failures can be slowed down. The IP address itself is never stored. Pairing attempts and syncs from the desktop app are logged the same way, with the IP hash and no address, and so is each feedback message sent and each friend invite or redemption, with only the time and the IP hash, never the message or the code. These rows are deleted after 30 days.

Counting visits

The site counts its own visits, without cookies and without any outside service. It records the page path, the patch, whether an addon line was imported or the addon downloaded or its CurseForge link followed (and how many entries), whether you were signed in at the time (yes or no, not which account), and a visitor hash. That hash is made from your IP address and browser string, salted with a key that changes every day, so two visits on the same day group together and nothing links you from one day to the next. These rows are deleted after 400 days. Since 10 October 2026 a page view also records, as broad names only: the kind of device (phone, tablet or desktop), the browser and system family (such as Chrome, Android), the country Cloudflare works out from the connection (your IP address is not stored), the name of the site you clicked through from (such as Google or Discord, never the page or its address), your browser's language, and whether the site was opened from a shortcut on your home screen. None of these is stored with anything that says who you are. The same table also counts, without saying which account, when an account is created, when a desktop app is paired and when an account receives its first synced character; a desktop app's rows carry no visitor hash.

A few short links we hand out, such as one in a video description, start with /go/. Opening one counts a click under that link's name, at most once a day, in the same table with the same daily visitor hash, and then sends you on to the page.

While a page is open in a visible tab, it tells the server once a minute that it is still open: the page path, the same visitor hash, and whether you are signed in. One row per visitor, overwritten each minute and deleted 15 minutes after the last one.

The administrator sees these as counts and as one row per visit per day; a visit is never tied to an account.

For accounts, the administrator has one page that lists who has an account: the email address, the BattleTag if you sign in with Battle.net, when you joined and were last active, the characters the addon or Battle.net reported (name, realm, level, class, race, faction, addon version, last sync), your paired devices, and which features you use, as counts (friends, share links, crafter listing, message threads, guild sharing, vault weeks, feedback). It does not show what you saved on the site, your bags or bank, or what your messages say. Only the site's administrator can open it; it is there to help with support and to see how the site is used, and nothing on it is shared with anyone.

Other people's servers

  • Wowhead (wow.zamimg.com): item, spell and class icons, and on most pages Wowhead's tooltip script, which draws the item pop-ups. Your browser fetches these from Wowhead's servers, which tells them your IP address. The script is Wowhead's own code running in the page, so it can use cookies and contact other servers of theirs; their privacy policy applies to it. If you block it, the site works the same, just without the pop-ups.
  • Blizzard: only when you choose to sign in with or link Battle.net. The server then reads your characters from Blizzard's API as described above.
  • Cloudflare Turnstile: a check that you are a person, on the few forms a bot would abuse: creating an account, asking for a password reset, sending feedback, and starting a new conversation in Messages. It is only loaded on those pages and only once you start filling in the form. Your browser then talks to Cloudflare's servers (challenges.cloudflare.com), which sees your IP address and some facts about your browser to decide. The server here only receives "passed" or "not passed". Cloudflare's own privacy policy applies to it.
  • Links to Wowhead, Maxroll and Bluesky are ordinary links: nothing is sent until you click one.
  • Email: password reset mail, the getting-started mails, a mail to everyone now and then, answers to feedback and "you have a message" mails are sent from [email protected], through the mail delivery service SMTP2GO. It sees the address and the message it delivers, and its own privacy policy applies.
  • Hosting: the site runs on a server at Wij zijn Merlin in the Netherlands. Like every web server it keeps access logs with IP addresses and the addresses requested; these are deleted after 7 days.

Fonts are hosted here rather than at Google.

Why, legally

  • Your account, sync, Battle.net link, desktop app, share links and feedback: to provide what you asked for (GDPR article 6(1)(b)).
  • Sign-in and pairing logs, access logs, backups and the site's own visit counter: the legitimate interest of keeping the site secure and working, and knowing whether it is used (article 6(1)(f)).
  • What friends and confirmed guildmates see by default, and the population totals: the legitimate interest of players seeing their friends' and guild's characters without everyone switching everything on first, and of knowing who plays (article 6(1)(f)). Each default can be switched off with one click, and the totals contain nothing that points to you.
  • Anonymous crafter counts and requests: the legitimate interest of players finding someone who can craft what they need (article 6(1)(f)). Only a count is shown, you can object with one switch, and nobody learns who you are unless you answer.
  • Armory pages on by default: the legitimate interest of players looking up a character's gear and professions, as they can for any character in the game itself (article 6(1)(f)). A page shows nothing about the account behind it, and can be switched off per character or all at once.

What is not here

No advertising, no analytics service, no selling of anything, no fingerprinting, no profiling and no automated decisions about you. Nothing is shared beyond the services named above, the share links you make yourself and the Armory pages described above.

Your rights

You can see, take away and delete your data from the Account page without asking anyone. For anything else, such as changing your email address, correcting, restricting or objecting, or a question about this page, write to [email protected]. If you think your data is handled wrongly, you can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.