Privacy policy

What is stored, and why

• From Discord, when you log in: your user ID, username, display name in the guild's server, and the names of your roles there. Used to know who you are and what you may see. Sessions last 30 days and end when you log out. The day of your last login is kept for the guild's officers, so they see who still has to log in once. A login on the setup pages is also noted for the operator for 30 days (your username and the names of the Discord servers you administer), so a guild that started setting up and got stuck can be offered help.
• From Discord, for the guild: the server ID, and names of channels the bot posts in. The bot keeps no chat. It looks at the posts Raid-Helper makes, to see when a comp goes up. If the guild picks a channel for recipe claims, the bot also reads what is posted there, to spot someone saying they can now craft a recipe. It asks them to confirm with a reaction first, and keeps only the confirmed recipe, never the message.
• From Raid-Helper: signups and rosters for the guild's events: the character names and Discord IDs of who signed up. The guild's admin provides the API key.
• From signups on our bot: who answered each raid and how, with the character, role and note they gave, their soft reserves where the guild uses them, and a record of who changed what on the raid's page.
• From Warcraft Logs: the guild's public raid reports: who was present, parses, gear, consumable use and deaths.
• From the guild: the roster, loot history, wishlists, resist sets and assignment notes that officers and raiders enter.
• From the in-game addon, through the uploader: what a character's own game client read: its resistance gear, its known recipes and their materials, the guild bank as that character saw it, and the guild roster as the game lists it (names, ranks, levels, classes, guild notes, last online). The addon cannot reach the internet: it passes these between guildmates over the game's own addon channel, and they reach the site only when an officer of that guild runs the uploader on their own PC. Every read is stamped with the game client and realm it came from and goes only to that guild's site. A raider keeps every character on their game account out of it with /vrt share off.
• From the loot master's PC, through the uploader: the loot history the guild's loot addon keeps (such as RCLootCouncil, Gargul or LootReserve), and which raider's PC each copy of the uploader runs on and when it last sent something.
• Billing: handled by Stripe. We store the Stripe customer and subscription ids for the guild, never card details. Stripe's own privacy policy applies to payment.
• Technical: server logs with errors and the paths of failed requests, kept for 14 days. The server also counts page views per page and per day, and the domain of the site a visitor came from; that count keeps no IP address, cookie, user agent or other identifier, so it cannot tell visitors apart. No advertising, no analytics trackers, no sale of data.

Who can see it

A guild's data is visible to that guild: members see the public pages, officers see officer pages, the guild's admin sees settings and billing. The operator can access data to run the service and fix problems; opening a guild's site as its guild master (to set it up or fix it for the guild) happens only after the guild's admin has allowed it on the servers page, for a week at a time, and the guild sees when it was used. Nobody else, except when the law requires it.

Where and how long

Data lives on the operator's server in the EU. It is kept while the guild exists. When a guild is removed, its data is deleted within 30 days (the delay allows an "oops" recovery). A person can ask to have their own records removed from a guild by contacting the guild's admin or the operator.

Cookies

Session cookies that keep you logged in, and, when you arrive through a referral link, one that holds that link's code for 30 days, so the guild that sent you gets its free month if yours subscribes. Nothing for tracking or advertising, so there is no cookie banner.

Your rights

You can ask what is stored about you, have it corrected or deleted, or object to its use. Contact us in the help Discord. If you are in the EU you may also complain to your data protection authority.