Privacy Policy

Last updated September 16, 2026

What We Collect

You can read every public page on Everything WoW without an account. When you sign in, we store the email address your magic link was sent to. If you sign in with Discord, we store the identifier Discord gives us so we can recognize you on your next visit. If you sign in with or link Battle.net, we never store your Battle.net account name or your Battle.net identifier; we store a one way hash of that identifier, which lets us match you to the same account again and cannot be read back into the original value. We also store the display name you choose, the region you select, the comments and votes you post, and the characters you claim.

When you upload a file from the Everything WoW Companion, the upload is recorded against a contributor hash computed from your account identifier rather than from your name, and an upload you send while signed out is attributed to nothing.

Analytics

The site does not run a third party analytics script, does not sell data, and does not build advertising profiles. We record no page or event data about you today; if that changes, this page will say what is recorded before it is.

Cookies

Everything WoW sets a small number of cookies of its own. The cookie named ewow_account is a signed in marker that carries no name, no address, and no token; it lets the server decide whether to render an account link, and it lasts one year. The cookie named ewow_bnet holds your Battle.net session details for the short window in which you can claim a character; it is not readable by scripts in your browser and it lasts ten minutes. Three more cookies hold only technical state: one carries the short-lived value that protects a Battle.net sign in, one remembers the country your request resolved to for a day, and one remembers which game version you are browsing. Your sign in session itself is kept by your browser's local storage rather than by a cookie.

Who Else Sees Your Data

Our database, authentication, and email delivery run on Supabase through Lovable Cloud. Cloudflare serves the site and protects it from abuse. Blizzard Entertainment's API provides the game data and, when you sign in with Battle.net, confirms your identity to us. Discord provides sign in when you choose it. Cloudflare Turnstile checks that a comment comes from a person rather than a script. We share nothing with anyone else.

How Long We Keep It

Your account record, your comments, your votes, and your claims are kept until you ask us to delete them. Analytics events are kept in a rolling summary and the detailed rows behind them are removed as they age out.

Deleting Your Account

There is no self service delete control on your account page yet, so email support@everythingwow.com from the address you sign in with and we will remove your account, your claims, and your comments.

Game Data

Game data provided by Blizzard Entertainment through the Battle.net API. Everything WoW is a fan site and is not affiliated with or endorsed by Blizzard Entertainment.

Contact

Write to support@everythingwow.com with any question about this policy.