Privacy Policy

Last updated: 24 October 2026.

The short version: you can read every guide, map, item page and tool on this site without an account, and nothing you do is tied to a name unless you sign in on purpose. Nothing you do here is sold to anyone, and we build no profile of you. Item pages and profession guides carry one Google AdSense unit, which is the one place a third party can set a cookie in your browser from this site — what that means is below.

If you never sign in

A few things are kept in your own browser and never sent anywhere. Clearing your site data removes all of them.

• Your place in a guide. How far through a profession route or a step-through guide you are, so the page remembers it on your next visit.
• Small preferences. Which faction tab you last opened, and the action bar you built in the rotation trainer.
• The cookie choice itself, for a year, so the banner stops asking.
• Your language, if you change it.

Talent builds, gear sets and rotation bars are kept in the address bar rather than stored — that is why sharing one is copying the link.

Visit measurement

The site uses Vercel Web Analytics, which counts page views by route and records where a visit arrived from. Vercel documents it as working without cookies and without tracking anyone across other sites. A handful of interactions are counted too — that a talent calculator was used, that a quiz was finished, that a map was opened — as counts, never tied to a person, and capped at five per page view so a session cannot be reconstructed from them.

Query strings are stripped before anything is recorded, apart from utm_ campaign tags, and the admin pages are excluded entirely. That matters because a query here is often state or a secret — a one-time Discord linking code, for instance.

There is no Google Analytics and no Google Tag Manager on this site. The policy this page replaces described both, and was wrong.

Advertising

Item pages and profession guides carry one Google AdSense unit each — 1,435 pages of the site; the homepage, the hubs, the class guides, the references and the tools carry none. It is the only advertising network here and there is never more than one unit on a page.

Google serves those adverts and decides what you see. We do not send Google anything about you, and we get nothing back that identifies you — but the script Google loads can read and set cookies in your browser, which is how advert frequency and measurement work, and that is outside what this site controls. What Google does with it is described in how Google uses information from sites that use its services.

The cookie banner on this site does not answer for Google. It asks one question — whether interactions may be counted — and Google's own consent framework arrives with the advert script and asks about its cookies separately. Two banners is not a tidy arrangement; it is the honest one, because only Google can take consent for what Google sets.

There is also one affiliate banner, for a levelling addon. It is a link and a picture served from this site, it sets no cookie, and it is labelled "Affiliate" where it appears.

If you sign in

Signing in is with Google, through Firebase Authentication. Google tells us three things about the account — the email address, the display name and the profile picture — and we store them alongside what you do on the site:

• the profile you choose: your public address, a short bio, a website link;
• which items and recipes you have answered correctly in the quizzes, and the skill that is computed from them;
• your progress through profession routes and step-through guides, mirrored from your browser;
• your Discord account id, only if you link one;
• any guide you write, and any picture you upload for it.

Your profile page is public. The display name, picture, bio, website and skill progress on it can be read by anyone with the address. Your email is not shown there and is not shared with anyone. A guide you publish carries your display name as its byline.

While you are signed in, your browser holds a sign-in token in a cookie so the server can tell it is you. Signing out removes it.

Who else sees anything

• Vercel hosts the site and therefore handles every request, including your IP address, and provides the analytics above and the storage that uploaded pictures go to.
• MongoDB Atlas stores the site's content and, if you have an account, your profile row.
• Google — only for signing in, through Firebase, and only if you do.
• Blizzard. Item, spell and talent icons are loaded straight from Blizzard's own image servers, so your browser contacts them on most pages and they see your IP address, as they would for any site that shows those icons.
• RestedXP, if — and only if — you click the affiliate banner. That is an ordinary outbound link; what they do after the click is covered by their own policy. The banner is labelled, and the link is marked as sponsored.
• Discord, if you use the bot or link your account to your profile.

None of it is sold, and none of it is handed to an advertising network or a data broker. That is worth stating precisely now that there is an advertising network on the site: Google serves the adverts and its script sees what any script in your browser sees — the page you are on, your IP — but nothing from the list above is passed to it. Your email address, display name, quiz progress and guide position stay in this site's own database and go nowhere.

Your rights

You can see everything held about you, correct it, take a copy of it, or have it deleted. The profile page edits most of it directly, and deleting your account removes your row, your quiz progress, your guide progress and your Discord link outright — that is a real delete, not a flag.

Anything else — a question, a correction, a copy of your data, or a complaint — goes to itswowguides@gmail.com, and is answered within 30 days. If you are in the EU or the UK and are not satisfied with the answer, you may complain to your national data protection authority.

How long anything is kept

Browser storage lasts until you clear it; the cookie choice expires after a year. An account and its progress are kept until you delete the account. A guide you published stays up after that, because other people link to it and read it — ask and it will be taken down or the byline removed. Analytics figures are counts with nobody attached and are kept by Vercel on their own schedule.

Children

The site is not aimed at children under 13, and accounts are not knowingly created for them. If you believe one exists, write to the address above and it will be removed.

Changes

This page is written from what the code does rather than from a template, so it changes when the site does. The date at the top is when it was last checked against the repository. See also the cookie policy and how this site is built.