Privacy Policy

Authentication & Profile Data

• Email address (via Supabase Auth)
• Username and display preferences
• Account creation and last login timestamps
• Role assignments (Member, Officer, Guild Master)

World of Warcraft Character Data

• Character names, realms, classes, and specializations
• Item levels, Mythic+ ratings, and raid progression
• Character history and performance tracking
• Main character designation

Guild Application Data

• Application responses and preferences
• Contact information (Discord, Battle.net)
• Availability and playstyle information
• Application status and review notes (visible to officers)

Event & Raid Data

• Event signups and attendance records
• Raid roster assignments
• Loot preferences and distribution history
• Performance logs and combat analytics

Blizzard Entertainment APIs

We fetch public character data from Blizzard's official APIs, including:

• Character profiles, equipment, and statistics
• Guild roster information
• Achievement and progression data

Raider.IO API

We retrieve Mythic+ scores, dungeon runs, and seasonal rankings from Raider.IO's public API.

Warcraft Logs API

We access raid logs, performance metrics, and combat analysis data from Warcraft Logs when authorized by guild officers.

Rybbit Analytics

We use Rybbit Analytics with salted user identifiers to understand site usage while protecting your privacy. This means:

• Your user ID is cryptographically hashed before being sent to analytics
• We track page views, navigation patterns, and feature usage
• No personally identifiable information is shared with the analytics provider
• Analytics data helps us improve site performance and user experience

Supabase (Database & Authentication)

• All data is stored in a secure PostgreSQL database hosted by Supabase
• Connections are encrypted using SSL/TLS
• Authentication uses industry-standard OAuth 2.0 and JWT tokens
• Passwords are hashed and never stored in plain text

Data Access Controls

• Public Data: Character names, guild rosters, and recruitment posts are publicly visible
• Member Data: Event signups, attendance, and performance stats are visible to guild members
• Officer Data: Applications, officer notes, and detailed analytics are restricted to officers
• Admin Data: User management and system settings are only accessible to guild leadership

Essential Cookies

• Authentication tokens: Supabase uses cookies to maintain your login session
• Theme preferences: Your dark/light mode choice is stored locally

You have the right to:

• Access your data: View all information we have about you in your profile and settings
• Update your data: Edit your profile, characters, and preferences at any time
• Delete your data: Request account deletion by contacting guild leadership
• Export your data: Request a copy of your data in a portable format
• Opt out: Withdraw from events, remove characters, or leave the guild at any time

Legal Basis for Data Processing

• Consent: You provide explicit consent when creating an account and applying to the guild
• Legitimate Interest: We process data to manage guild operations, events, and community features
• Contractual Necessity: Certain data is required to provide guild membership services

Data Retention

We retain your data for as long as you maintain an active account or guild membership. After account deletion:

• Personal data is deleted within 30 days
• Anonymized historical data (raid logs, attendance) may be retained for statistical purposes
• Backup systems are purged within 90 days

International Data Transfers

Our data is hosted by Supabase in secure data centers. By using this service, you consent to data being processed in accordance with Supabase's security and privacy standards.