Privacy policy

Last updated 5 November 2026.

Who is responsible

RestedRealm, an independent fan project, decides what is stored here and why: the “controller”, in the words of the GDPR. Reach us at hello@restedrealm.com or on our Discord.

If you never sign in

Reading the site does not create an account or a visitor profile. Your browser stores a small local flag after you close the optional site tour invitation, so it normally appears only once on that browser. The moment you plan an event, sign up for one, or appreciate a screenshot without an account, we set one cookie, az_guest, holding a random identifier for 30 days. It is what lets you come back and change your own sign-up. Clearing it means we can no longer tell that sign-up is yours.

There are no analytics, no advertising networks, no social embeds and no third-party scripts anywhere on the site. Game icons and images are served from our own domain rather than someone else's.

If you sign in with Discord

Discord asks you to approve two scopes, identify and guilds, and we store:

• Your Discord user id, username, display name and avatar reference.
• The servers you are in: their id, name, and whether you own them. This is how the planner can show “your servers” and offer to add the bot. It is refreshed when you sign in.
• Your session: a hash of the cookie value (never the value itself), when it was created, when it was last used, and the browser's user-agent string. A session lasts 30 days and extends while you use it.
• Discord access and refresh tokens, encrypted before they are written down, so the site can refresh your server list without asking you to sign in again.

We never receive your email address, your password or your direct messages. The bot uses no privileged intents: it cannot read your channels' messages, and it never sends direct messages.

After your first website sign-in, a welcome card appears until you close it or choose a place to start. We keep the time you completed it with your account so it does not return on another device.

Battle.net and Guild Finder

Battle.net can be your only sign-in method, or you can connect it to an account that also uses Discord. We request the wow.profile scope. We store the provider account ID, region, scope, token expiry and an encrypted access token. A keyed identifier keeps your site account recognizable on future sign-ins even after profile caches expire. It is removed when you disconnect or delete your account.

For guild verification we temporarily cache character IDs (with realm IDs for Retail; Forever has no realms), the guild name you type, and guild roster ranks. Battle.net lets us read your character list for 24 hours after you sign in with it, and we do not ask again in the background: to keep a guild you lead verified, we compare its roster each day with the list from your last sign-in, for up to 30 days. These are not a public character directory. Guild identity, its ruleset, its roster as Blizzard reported it (names, ranks, levels, classes and races) and the date of a successful leadership check accompany published guild pages. When a guild master verifies a guild, a local page someone else made with the same name leaves the Guild Finder and is deleted after 30 days; its maker is told on the site. Guild introductions, schedules and recruitment choices are written by the owner.

Applications contain the character name, role and message you choose to submit. Only you, the currently verified guild master, and the people that guild master has named as recruiters can read them through the site. The guild page lists who those people are, and the guild master can remove any of them at any time. Withdrawal erases the character name, introduction and conversation immediately. Messages and introductions are erased 90 days after closure, retaining minimal application-status history until account deletion. Open conversations remain until closed or your account is deleted. On-site notifications expire after 90 days. Optional Discord alerts contain only a generic private inbox link, never message text. Discord may retain delivered alerts under its own policy.

Battle.net profile caches, connection records and imported guild identity are removed after 30 days without refresh. Guild claim checks are kept for 30 days. Disconnecting removes your connection and private snapshots immediately and pauses your guild management. Token revocation is queued; an encrypted revocation token may remain until delivery or the queue’s 30-day retention limit. Your site account and editorial guild text are separate from this API cache.

RestedRealm Companion

RestedRealm Companion is an optional Windows app with a World of Warcraft: Forever addon. The addon notes world interactions while you play, such as quests, creatures, merchants, trainers, loot and flight maps. Its first copy stays in the game's SavedVariables on your PC. The app copies completed saves into a private queue on your PC, so nothing is lost if you are offline for days. It does not read other addons, game memory, chat, friends lists or your Discord and Battle.net login details.

The app uploads only after you connect it to your RestedRealm account. Its setup shows what is sent, with automatic upload switched on; you can switch it off there or later in the app's Settings, and upload by hand instead. An upload contains game IDs, names and values of what you met, the Forever build and language, the time and your approximate map position, and your character's realm, race, class, faction and level. From addon version 0.1.15 (app 0.2.2) it also contains the quest text, objectives and NPC dialogue the game showed you. From addon version 0.1.19 (app 0.2.7) it also contains the descriptions of the spells your character knows, as the game shows them, with the talent points spent in each talent tree; we use them privately to check our spell pages against the game, and they are not shown on the site. Before that text is saved, the addon replaces your character's name, race and class in it with neutral placeholders, so the text says “<name>” where the game said your name. Text saved by an older addon version still contains your name and is never uploaded. An upload never contains your character's name or other players. We keep the link to your account privately to prevent abuse and to delete it when you ask. Contributor names are never shown.

Game facts from uploads are published from a single report. Quest titles, objectives, rewards, experience and coin, quest text, NPC names and where players met an NPC can appear on the site once one account has reported them. When players report different values, the page shows the one most players reported, and two values with as many players each are not shown. Every published fact says its game build and how many players reported it, never who. Where players met an NPC is shown as a spot on the zone map, not as anyone's path or the time they were there. Your account, character details and the upload itself stay private. NPC dialogue and spell descriptions are kept privately for now. A record we do not accept is refused and not stored.

Connecting uses a one-time code that lasts five minutes. Each PC gets an upload-only credential that expires after 180 days and can be disconnected from your companion page; we store only its hash. When your companion sends something you already sent (the same trainer list or quest window again), it is not stored a second time; the copy we hold is marked as received again. Raw account-linked uploads are removed from the server 90 days after we last received them, and deleting your account removes them, the account-linked reports built from them and the PC connections straight away. What quest, NPC and item pages have already published from them (for example a quest's title, experience or quest text, an NPC's title and what a trainer teaches or a vendor sells, with how many players confirmed it) is game information and stays on the site; it is stored without any link to your account or any other player. When the server refuses an upload or a record (for example a checksum that does not match), we note only the reason category, the time, the count and which connected PC sent it, never the refused content, so we can tell you whether a session arrived; those notes are deleted after 90 days or with your account. Your account export includes your connected PCs and uploads. The queue and game save on your PC are separate: deleting your site account does not erase them, and the app can delete its own copy from its Settings.

Supporters of the Realm thanks the players who help with the companion. For that we keep two dates per account that has sent at least one accepted record: the first and the most recent. They are kept after raw uploads expire, so “supporting since” stays true, and they hold no game data. Your name appears on that page only if you switch it on in your companion page, as your Discord name or a name you choose; a chosen name is checked by our moderation first. The page also ranks each calendar month's supporters by points: for each distinct thing your companion reported that month we note the thing (a game ID such as a quest or NPC, never text), the month and its points. Those rows and a list of which game facts you reported are kept privately for at most 90 days, and the page shows only your rank and total points, never what was sent. Without a name switched on you are ranked as “a supporter without a name”. Switching your name off removes it at once, deleting your account removes both dates, your points and your choice, and your account export includes them.

What the planner stores

• Characters you add: name, second name, class, spec, role, faction, region, realm type, and which is your main.
• Your sign-ups: the raid, your character, your role and spec, whether you are coming, your note, your place on the roster or bench, and attendance a manager recorded afterwards.
• Raids you organise: title, instance, time, size, role targets, description, ruleset, picture, visibility, and the Discord channel and roles it uses.
• The raid leader named for a raid: their Discord id when a manager picked them from the server, or simply the name that was typed.
• A history of changes to each raid (who changed what, and when), which that raid's managers can read.
• Your private calendar token, the secret in the address of your personal calendar feed.

A raid manager can add someone to a roster by hand, which stores that person's Discord id or the name typed for them. When that person first signs in, the row becomes theirs.

Community gallery: a submitted screenshot is stored privately until it is reviewed, its embedded metadata (including any camera or location data) is stripped, and only the player name and title you chose become public if it is approved.

Talent builds

Talent builds: when you choose Save build, we store the build name, optional notes, talent choices, target level, client snapshot identity and edit timestamps under your account. These stay private and are kept until you delete the build or your account. They are included in your account export. Sharing or exporting a build copies only its talent choices and snapshot identity, not your account, name or notes. Anyone with that shared copy can import it; copies cannot be recalled.

Wardrobe

Signed out, what you make in the Wardrobe stays in your browser and never reaches us. When you are signed in and save an outfit or a scene, we store the name you gave it and the outfit or scene itself (race, body, item numbers, appearance, and for a scene where each character stands, the names you gave them and the view) under your account. If you tick pieces as “I have it” in the farming plan, we store those item numbers too. They are your own word: we do not read your game for them. Only you can see any of this. It is kept until you remove it or delete your account, and it is included in your account export. A backdrop picture of your own is read by your browser and is not sent to us.

Comments, community posts and notifications

When you comment, reply or share a screenshot, video, field note, or an outfit or scene from the Wardrobe, we store what you wrote, the picture you uploaded or the page took of your characters, the outfit or scene itself, the page it belongs to and when, under your account. Pictures are re-encoded before they are stored, which removes camera details and location. Published posts and comments are public with your display name. Likes and votes are stored with your account so each person counts once; others only see the totals. Favorites are a separate private list of posts you save for later, with the names you give to collections of them. They are kept until you remove them or delete your account, and they are included in your account export. You can delete your own comments and posts at any time.

Everything you have published is also listed together on one public page. Its address holds your site account's identifier, not your Discord id, and it is kept out of search engines. The names you gave characters in a scene are left out of a published scene.

Challenges: if you enter a post, we store which post you entered and when. If you vote, we store which entries you voted for, so each member has three votes. Nobody else sees who voted for what; totals are shown once voting has closed. Entries and votes are removed with your account and are included in your account export.

Before anything is published it is checked against the community rules (opens in a new tab). We run our own checks first. Public posts, comments and pictures are then sent to OpenAI's moderation service (omni-moderation-latest), which returns scores we use to decide whether a person needs to look first. Only the text and the picture are sent: never your name, account, email address, IP address or other posts. Private messages and guild applications are never sent. We keep a record of each check and each moderator decision, with the reasons, so decisions can be reviewed.

Notifications about replies and your posts appear in the bell on the site. If you turn on browser notifications, your browser gives us an address at its own push service (Google, Mozilla or Apple, depending on the browser); we send it only the title of the notification and a link. You can turn this off in your notification settings, and it is removed with your account. Email notifications are not sent yet.

What we do not store

The application keeps no IP addresses and no advertising identifiers. Rate limiting counts requests against your account or session id, not your address. The web server in front of the application keeps ordinary short-lived request logs, as every web server does; those are not used to build a profile of you.

Why we are allowed to keep it

• To do what you asked (performance of a contract): your account, your characters, your sign-ups, the raids you plan and the Discord posts that go with them, and what you save under your account in the Wardrobe and the talent planner.
• Legitimate interests: keeping the service secure and working. Session hashes, rate limiting, error alerts, backups, and the raid history that lets a guild see who changed a roster.
• Your choice: publishing a post, an outfit or a scene in the community, entering or voting in a challenge, and subscribing to a calendar feed. None of these is needed to use the planner or the Wardrobe.

Recruitment profiles and guild membership

Looking-for-guild profiles are off by default. If enabled, your self-reported character name, class, role, play styles, timezone and availability are visible only to people who lead a guild page on this site. Guild pages are claimed here and not checked against the game, so anyone who makes one can see the profiles that are switched on. Profiles stop appearing after 30 days without an update. You can hide your profile at any time. Account deletion removes it.

Guild pages may display dated in-game character membership from Blizzard. This does not disclose linked site accounts or Discord identities. Provider roster data expires after 30 days. Leadership changes are recorded so access follows the newly verified owner.

Who else sees it

• Discord, when the site posts your raid, its roster and its reminders to the channel your server chose, and when it signs you in. Their privacy policy applies to everything on their side.
• The people in your raid: a roster is visible to whoever can see the raid, which the raid itself decides: public, unlisted link, or server members only.
• Blizzard, when you choose Battle.net sign-in or guild verification. Their privacy policy applies on their services. Your application message is not sent to Blizzard.
• The verified guild master, and the recruiters they have named, when you submit a private application to their guild. Who they are is shown on that guild’s page.
• OpenAI, which checks the text and pictures of public comments and community posts before they appear, as described above. Their privacy policy applies on their side.
• Your browser's push service, only if you turn on browser notifications.
• We do not sell data, share it for advertising, or use an analytics provider.

The site itself runs on a server we rent and administer; the database, the uploaded pictures and the nightly backups all live there. Public game data is fetched from Blizzard and wago.tools. Account-specific Blizzard requests happen only for the Battle.net connection and verification features described above.

How long we keep it

• Your site account: until you delete it. Battle.net caches and guild applications use the shorter retention periods above.
• Sessions: 30 days after last use, then removed automatically. Expired sign-in states go within the hour.
• Discord tokens: removed 60 days after they expire, and revoked at Discord the moment you delete your account.
• Guest sessions: 7 days after expiry, unless they still hold an event, a sign-up or a gallery submission.
• Rate-limit counters: one hour. Operational records: job runs 14 days, delivered Discord messages 7 days, undeliverable ones 30 days, resolved alerts 90 days.
• Comments and community posts: until you delete them or your account. Text a moderator removed, or that was refused, is erased after 90 days; the decision and its reason stay. Pictures uploaded but never posted are deleted after a day.
• Moderation check details (scores and link classifications): 180 days.
• Notifications: read ones after 90 days.
• Backups: nightly, kept 14 days, then overwritten.

Your rights

• See it: your account page has a one-click export of everything we hold about you, as JSON.
• Correct it: your characters, sign-ups and raids are editable there and then.
• Delete it: deleting your account removes your account, characters, sign-ups, sessions and Discord tokens, and revokes our access at Discord. Raids you organised stay for the people who signed up for them, without your name on them, and the history log keeps the action while losing the link to you.
• You may also object to processing, ask us to restrict it, and complain to your country's data protection authority.

Children

RestedRealm is not meant for anyone below Discord's minimum age where they live. If you believe a child has an account here, tell us and we will remove it.

Changes

When this policy changes, the date at the top changes with it and the change is written in the project's changelog. Changes that matter are announced on the site.