Privacy Policy

Last updated: August 14, 2026

1. Information We Collect

Battle.net Profile Data

When you sign in with Battle.net, we collect your BattleTag, character data, collections (pets, mounts, achievements), and guild information. This data is used to provide the core functionality of Warband Companion.

IP Addresses and Usage Data

We automatically collect IP addresses and user agent information for the following purposes:

  • Security and fraud prevention
  • Rate limiting and abuse prevention
  • Error logging and debugging
  • Analytics and service improvement

IP addresses are stored in our database logs and are retained for 72 hours before automatic deletion.

Email Address

We collect your email address from your Battle.net profile during sign-in. Your email is used for subscription receipts, important account notifications, and support ticket communication. We will never sell your email address or use it for unsolicited marketing.

Analytics Data

We use Google Analytics 4 (GA4) to understand how users interact with our service. This includes page views, feature usage, and general usage patterns. You can opt out of analytics in your browser settings or by using a browser extension such as the Google Analytics Opt-out Browser Add-on.

Advertising Data (Google AdSense)

We show third-party advertising served by Google AdSense to free-tier and signed-out visitors. Pro and Guild subscribers are never shown ads, and the AdSense script is never loaded for their sessions in the first place.

Google and its advertising partners use cookies and similar technologies (such as device identifiers) to serve ads and measure their performance, including personalizing ads based on your prior visits to this and other websites. Our AdSense account uses Google's default set of certified ad technology partners, who are also bound by Google's data-use terms.

If you are in the EEA, the UK, or Switzerland, Google's own consent message asks for your choice before any ad is personalized, and you can change that choice at any time from the same message. Everywhere else, you can manage or turn off ad personalization for your Google account at Google Ads Settings. More detail on the cookies and technologies Google's ad products use is at How Google uses cookies in advertising.

Ads never appear on this page, on /terms, or on the sign-in, pricing, contact, about, onboarding, account/billing, or support pages.

Payment Information

If you subscribe to a Pro or Guild tier, we collect payment information through Stripe, our payment processor:

  • Payment card information is handled entirely by Stripe and never stored on our servers
  • We store your Stripe customer ID to manage your subscription
  • We store subscription status, tier, and billing dates
  • We do not have access to your full payment card details

For more information on how Stripe handles your payment data, see Stripe's Privacy Policy.

Pro Feature Usage Data

For Pro and Guild subscribers, we collect additional usage data to provide Pro features:

  • Sync timestamps and cooldown tracking
  • Analytics dashboard views and interactions
  • Export history (CSV/JSON downloads)
  • Support ticket submissions and responses

2. How We Use Your Data

  • Provide and improve our services
  • Display your WoW collections and character data
  • Enable guild features and collaboration
  • Process subscription payments and manage billing
  • Provide Pro features based on your subscription tier
  • Send subscription-related notifications and receipts
  • Prevent abuse and ensure security
  • Analyze usage patterns to improve the app
  • Monitor system performance, error rates, and infrastructure health
  • Provide customer support

3. Data Retention

  • IP addresses and logs: Automatically deleted after 72 hours
  • Character and game data: Retained while your account is active. Data for accounts inactive for more than 6 months is automatically purged.
  • Subscription data: Retained for 7 years for tax and accounting purposes (required by law)
  • Payment information: Stored by Stripe according to their retention policy
  • Pro feature usage: Retained for 90 days for analytics and support
  • Analytics data: Retained for 14 months per Google Analytics default retention policy
  • Advertising cookies (AdSense): Set and retained by Google and its ad technology partners according to their own policies, not ours
  • Advertising cookies (Reddit): Set and retained by Reddit according to its own policies, not ours, and only after you consent
  • Advertising cookies (Google Ads conversion tracking): The click id is stored in our own first-party attribution cookies, not set by Google directly, and is only reported to Google after you consent

When you delete your account, all personal data is permanently deleted within 30 days, except for subscription records required for legal compliance.

4. Your Rights (GDPR)

If you are in the European Union, you have the following rights:

  • Right to access: Request a copy of your data
  • Right to deletion: Request deletion of your account and data
  • Right to rectification: Request correction of inaccurate data
  • Right to data portability: Request your data in a machine-readable format

To exercise these rights, please contact us.

5. Third-Party Services

  • Blizzard Entertainment: Battle.net OAuth for authentication and game data API
  • Raider.IO: Mythic+ run history, ratings, and character profiles. Character names and realm data are sent to retrieve M+ statistics.
  • Warcraft Logs: Raid reports, parses, and fight analysis. Guild and character names are sent to retrieve raid log data.
  • Wowhead: In-game item and ability tooltip scripts loaded client-side. No personal data is sent; Wowhead may collect standard web analytics via their script.
  • wago.tools: WoW database exports for vendor collectible data. No personal data is sent.
  • Stripe: Payment processing for subscriptions (see Stripe Privacy Policy)
  • Google Analytics: Website analytics and usage reporting (see Google Privacy Policy)
  • Google AdSense: Serves third-party ads to free-tier and signed-out visitors, using cookies and similar technologies for ad delivery, measurement, and personalization (see How Google uses cookies in advertising and Google Ads Settings)
  • Reddit: Reddit's advertising system, used to measure the performance of our Reddit ad campaigns, in two parts, and both require your consent. In your browser: a pixel that records that you visited the site and a browser identifier (via cookies). It loads only after you consent via the consent message described above; it never loads otherwise. Separately, from our own server: if you arrived from a Reddit ad and later subscribe, we may report that purchase to Reddit using the ad click id (an identifier Reddit issues, and can use to identify you) already stored in our first-party attribution cookies (see Data Retention below). Because that report can happen days or weeks after your visit — well after the browser session where you answered the consent message has ended — we record your answer at sign-up and check it again at report time; if you refused, or the consent message never loaded for your visit, we do not send that report at all. If you change your answer partway through a visit, that stops the pixel from sending anything further, but it does not retroactively remove anything Reddit's script already set or already received earlier in that same visit — undoing an event a third party already has isn't something we're able to do from our side.
  • Google Ads conversion tracking: Separate from AdSense above, and from our own server only — no browser pixel. If you arrived from a Google Ads click and later subscribe, we may report that purchase to Google Ads using the click id ("gclid", an identifier Google issues, and can use to identify you) already stored in our first-party attribution cookies (see Data Retention below). As with Reddit, we record your ad-measurement consent answer at sign-up and check it again at report time, since the report can happen days or weeks after your visit; if you refused, or the consent message never loaded for your visit, we do not send that report.
  • AWS: Hosting, database, and deployment services

These third-party services have their own privacy policies and terms of service. We recommend reviewing them to understand how they handle your data.

6. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via the app or email.