Privacy Policy

Last updated September 17, 2026

WoW Forever Builds is operated by József Bognár.Contact: jozsef.bognar@wowforeverbuilds.com.

Accounts and cookies

The talent calculator, Legacy planner and Alt Hub work without an account. An account is needed only to publish, vote on or comment on guides. We do not set advertising or tracking cookies ourselves; ads served by Google may use cookies, as described under Advertising. When you log in we set one strictly necessary session cookie (wfb_session), and Battle.net login briefly sets a cookie to protect the login request.

For an account we store:

• your username (public on guides and comments), and your email address if you give one;
• a salted, slow hash of your password, never the password itself;
• if you use Battle.net: your Battle.net account id and BattleTag. We request no other Battle.net data and cannot see your games or characters;
• active sessions (a hash of the session token and its expiry);
• whether your email address is verified, and short-lived password reset or verification links (only a hash of each link, deleted once used or replaced).

Guides, votes counts and comments you post are public. Which way you voted is not shown to other users.

Data stored only in your browser

Your working plan, saved builds, challenge progress and Alt Hub characters (including notes) are saved in your browser's local storage. They are not sent to us. Clearing site data removes them; use Export backup on the Alt Hub page to keep a copy.

Data we store on our servers

• Shared builds. When you press Share, we store the build (perk ranks), the optional build name and the data version, and show them to anyone with the link. Do not put personal information in a build name.
• Correction reports. We store what you enter in the form, plus a salted hash of your IP address that changes daily, used only to limit spam. We do not store the IP address itself.

Newsletter and launch email list

If you sign up for the newsletter, we store your email address, the page you signed up on, the main class you picked (optional), the time you signed up and confirmed, and a salted hash of your IP address that changes daily, used only to spot abuse. We use double opt-in: we send one confirmation email, and nothing else is sent unless you open the link in it. Addresses that are not confirmed are deleted after 30 days. We use the list only to email you a weekly recap of WoW Forever news, guides and builds, and news about the launch. If you signed up before September 21, 2026, when the form offered launch news only, you get launch news only. We never sell or share the list, and the emails are sent through Resend. Every email has a one-click unsubscribe link. When you unsubscribe we delete everything except your address and the fact that you unsubscribed, so we never email you again; contact us to have the address removed completely. The legal basis is your consent, which you can withdraw at any time by unsubscribing.

Analytics

We count anonymous usage events, such as opening the planner or sharing a build, with the page path, device type (mobile or desktop) and numbers like points spent. No character names, notes or identifiers are included. We may also use Cloudflare Web Analytics, which does not use cookies.

Advertising

Some pages show ads served by Google AdSense. Google and its partners may use cookies or similar identifiers to show and measure ads, including personalized ads where the law allows it and you have agreed. Visitors in the EEA, the UK and Switzerland are asked for consent first, and can change their choice at any time from the privacy message link. That consent message is Google's consent management message, shown to visitors from the EEA, the UK and Switzerland before personalized ads can load. Account, editing and legal pages never show ads. Learn how Google uses data atpolicies.google.com/technologies/partner-sites.

Service providers

The site runs on Cloudflare, which processes requests (including IP addresses) to deliver and protect the site. The report form may use Cloudflare Turnstile to block automated submissions. Account emails (password reset and email verification) are sent through Resend, which receives your email address and the message.

Your data

Signed-in users can download everything we store for their account from Account settings withDownload my data. The JSON file contains your profile (username, email and whether it is verified, rank, sign-up date and Battle.net link), your characters, the guides you wrote in every status with their full text, your comments, votes, bookmarks and the reports you submitted. It never contains password hashes or session and link secrets.

You can delete your account from the same page at any time. Deletion is immediate and permanent: your account, sessions, characters, guides, votes, comments and bookmarks are removed. Correction reports are anonymous and not tied to an account; contact us with the details to have one removed.

Your choices

To remove a shared build or a correction report you submitted, contact us with the link or the details of the report. You can remove all locally stored data by clearing this site's data in your browser.