Privacy Policy

What does Hero of Azeroth collect?

Hero of Azeroth collects information about the names, progress, achievements and in-game collectables of virtual characters within World of Warcraft. All of it is publicly available on the World of Warcraft Armoury, and none of it is tied to or correlated with any real-world information.

The site does not ask visitors for any personal information, and a visitor who never signs in leaves nothing behind that says anything about them. One trace is kept: the site's owner holds, for thirty days, the fact that a character was looked up - through the site's form, or by pressing Refresh on the character's page - together with the character's name and the moment. There is no account, no address and no browser in that row, and it cannot tell who asked, only that somebody was interested in the character.

Signing in with Battle.net

Signing in is optional, and it is the only thing here with an account behind it. The site never sees the password: it is typed on Blizzard's own page, and what comes back is the account's id, its BattleTag and the list of characters that account leads with.

Your profile decides what is published. The main you name appears in the Hall of Fame with its figures, and its alts are stored beside it. The profile's switch for the Hall of Fame can be set to do not publish, which takes the whole account out of the table - and the same rows are deleted on request, in Telegram.

The Discord bot

The Discord bot can keep one character per Discord account, and only if you press Save as mine under a card it has drawn: the region, the realm and the name, and nothing else - no messages, no servers, no channels. That is what makes /card on its own answer that character, and /forget deletes the row. The site owner also keeps a log of each /card for thirty days - which Discord account asked, which character, in which server, and whether the card was sent - and the servers the bot was added to, by name and size. Nothing of it is shared, and older rows are deleted.

Analytics, and the cookie question

The site counts visits with Google Analytics, which runs through Google Tag Manager. Nothing is stored on your device until you allow it in the cookie question at the foot of the page; if you decline, the counter keeps counting anonymously - no cookies, and nothing that identifies you. What Google does with what it collects is covered by Google's own privacy policy.

How is this information collected?

Character information is read through the web APIs Blizzard Entertainment publishes for the game, and only for characters somebody has looked up: the site knows the characters it has been asked about, and nothing else.

Some of what a page shows comes straight from other people's servers - the portraits and backgrounds from Blizzard's media service, the item tooltips from Wowhead's script. Like any script or image on any site, those requests carry the visitor's IP address to those services.

How is it stored and protected?

Whatever is collected is stored on the server this site runs on, in its own database, and nowhere else. The site follows the ordinary practices for keeping data away from people who should not have it: HTTPS in transit, a firewall, strong passwords and routine rotation of the keys.

Who has access to it?

Nothing about characters, accounts or visitors is sold or shared with third parties. What Google Analytics collects is covered by Google's own policy, and nothing else leaves the site.

How is this policy updated?

This policy is updated as needed, mainly to stay in step with Blizzard Entertainment's own policies. Updates are posted on this page, with a new date at the top.