Legal notice and privacy policy

WowMetaTracker is published by Baptiste Cools, a self-employed individual (entrepreneur individuel, micro-entreprise scheme) registered in France. He is also the publication director.

• Registered address: 142 rue Pasteur, 59262 Sainghin-en-Mélantois, France
• SIRET: 98329389500014
• VAT not applicable, article 293 B of the French General Tax Code (franchise en base de TVA).
• Email: support@wowmetatracker.com

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States (https://vercel.com).

WowMetaTracker is an unofficial fan site. It is not affiliated with, endorsed by, or sponsored by Blizzard Entertainment, Inc. World of Warcraft and all related trademarks, characters, artwork and game data are the property of Blizzard Entertainment, Inc.

Character progress is read from the public Battle.net API. Character artwork and icons are served from Blizzard’s own servers and are displayed here under fan-site use.

There is no advertising and no cross-site tracking on this site. No advertising pixel is loaded, no tag manager runs, and no profile is built about you across visits or across websites. Your data is never sold, rented, or shared for marketing purposes.

Two measurement tools do run, both from our hosting provider Vercel: Web Analytics, which counts page views and where visitors arrive from, and Speed Insights, which measures how fast pages actually load for real visitors. Neither sets a cookie, neither stores an identifier on your device, and neither can follow you to another website. They exist so the publisher can tell whether the site works, not who you are.

Because these tools require no cookie and build no profile, you are not asked to accept anything: none of the cookies used on this site require your consent.

If you browse without an account, nothing about you is stored on the server. The character you look up is sent to Blizzard, and the answer is shown to you; the character name you type is kept in your own browser so you do not have to type it again.

If you create an account, the following is stored, because the site cannot work without it:

• your email address and a hashed password, to sign you in;
• your chosen username and avatar, shown on your account page;
• the characters you save, the objectives you pin, and the Live Tracker entries you mark as favourites.

If you turn on email updates from your account page, your address is added to our mailing list at our email provider (see below). It is opt-in: off until you switch it on, it requires an address you have already confirmed, and switching it off removes you again. The address itself is not copied into our own database, so unsubscribing takes effect in one place.

Every message we send carries an unsubscribe link, and using it stops the list at once.

If you send feedback through the bubble in the corner of the screen, your message, your username and your email address are emailed to the publisher so that he can reply. They are not stored in the database.

Abuse protection. A few public endpoints are rate limited. To count requests without identifying anyone, the site stores a truncated one-way fingerprint of the IP address combined with the current hour. The IP address itself is never written down, and the fingerprint cannot be reversed into one.

Only two kinds of cookie are set, both strictly necessary:

• Session cookies, set when you sign in, so that you stay signed in. They disappear when you sign out.
• A language preference cookie, so that the site opens in the language you picked.

Neither is used for measurement or advertising. Under the ePrivacy rules, strictly necessary cookies do not require consent, which is why there is no cookie banner.

These providers act as processors on the publisher’s behalf. Each one receives only what its job requires.

• Supabase — database and sign-in. Holds your account and everything you save.
• Vercel — hosting, plus the cookieless audience and speed measurement described above. Serves the pages and keeps short-lived technical logs.
• Brevo — transactional emails and the newsletter. Holds subscriber email addresses.
• Cloudflare — the anti-robot check on the sign-up form.
• Blizzard Entertainment — the public character API. It receives the character name and realm you look up. It never receives your account details.

Some of these providers operate outside the European Union. Transfers rely on the safeguards published by each of them, including the EU standard contractual clauses.

Account data is kept for as long as the account exists. Delete the account and it goes with it, immediately and in full: the profile, the saved characters, the pinned objectives and the favourites are all removed by the same operation.

Newsletter subscriptions are kept until you unsubscribe, which you can do from any email or from your account page. Abuse-protection fingerprints expire within hours.

Under the GDPR you may ask for access to your data, correction of it, deletion of it, a portable copy of it, or restriction of its use. You may also object to processing.

The quickest route for deletion is the Delete my account button on your account page, which acts at once and without asking anyone. For anything else, write to support@wowmetatracker.com.

If you believe your data is mishandled, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

This page may change as the site grows. The date at the top always reflects the current version. A change that materially affects how your data is used will be announced on the site before it takes effect.