Privacy policy

What ForeverDB collects, why, who else is involved, and your choices. Last updated 27 September 2026.

The short version

• You can use ForeverDB without an account. Browsing is measured with analytics, and the site shows ads from Google.
• If you log in, we get your Battle.net account ID and BattleTag from Blizzard. We never see your password.
• Combat logs are read in your browser. Nothing is uploaded unless you choose to upload it, and you can delete what you upload.
• We don't sell personal data.

Who we are

ForeverDB (foreverdb.net, "we") is an independent fan site about World of Warcraft: Forever. It is responsible for the personal data described here. You can reach us through the contact page.

What we collect

When you browse

• Server and security logs. Our hosting (Railway) and our network provider (Cloudflare) process your IP address, browser details and the pages you request, to deliver the site and protect it from abuse.
• Analytics. We use Google Analytics and NitoPulse to understand how the site is used: pages viewed, time on page, clicks, scrolling, form interactions, page speed and errors, your device type and approximate location. Google Analytics sets cookies (named _ga); NitoPulse may use cookies or similar storage.
• Advertising. The site shows ads from Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet. You can opt out of personalised advertising in Google's My Ad Center, and learn more in how Google uses information from sites that use its services.

If you log in with Battle.net

• Blizzard sends us your Battle.net account ID and BattleTag after you agree on Blizzard's login page. We store them to keep your account, and record when you last logged in.
• A session cookie (fdb_s) keeps you logged in for up to 30 days. The database keeps only a one-way hash of it. A short-lived cookie (fdb_oauth, 10 minutes) protects the login itself.

Combat logs

• The replay reads your combat log in your browser. Nothing leaves your computer unless you press Upload or turn on live logging.
• When you upload, we store the report's title, visibility and file name, and each pull you send: the names, realms, classes and IDs of the characters in it, what they did (damage, healing, deaths, abilities, positions) and when.
• Public reports and the characters in them appear in the rankings and on character pages. Unlisted reports can be opened by anyone with the link. Private reports are visible only to you. You can change this, or delete a report, from your profile at any time.

The contact form

We store your message, the topic, the page you were on, and your name and email address if you give them (both are optional). To stop spam we keep a salted, one-way hash of your IP address, never the address itself. Messages are deleted after 12 months at most.

Stored on your device

Some settings, such as your map pins, planner setups and display choices, are saved in your browser's local storage. They stay on your device and aren't sent to us.

Cookies and your choices

Visitors in the UK, the European Economic Area and Switzerland are asked for consent before non-essential cookies are used for ads and measurement, through Google's consent message. You can change your choice at any time with Privacy and cookie settings at the bottom of every page. You can also block or delete cookies in your browser settings; the site keeps working, though you'll be logged out.

Why we use your data (UK GDPR)

• To provide what you ask for (your account, your uploads, answering your message): performing our service to you.
• To run, secure and improve the site: our legitimate interests, which we balance against your privacy.
• Analytics and advertising cookies: your consent, where the law requires it.

Who else processes data

Railway (hosting and database), Cloudflare (network and security), Google (Analytics and AdSense), NitoPulse (analytics) and Blizzard (Battle.net login). Some are based in or process data in the United States; they're bound by their own terms and data protection commitments. We don't sell personal data or share it with anyone else, unless the law requires it.

How long we keep it

• Your account: until you ask us to delete it. Sessions expire after 30 days.
• Uploaded reports: until you delete them, or your account.
• Contact messages: up to 12 months.
• Analytics and advertising data: as set by Google and NitoPulse (Google Analytics keeps event data for 14 months at most).

Your rights

You can ask for a copy of your data, have it corrected or deleted, object to how we use it, or withdraw consent at any time. Send a request through the contact page (topic: Privacy request); if you have an account, send it while logged in so we can match it to you. You can also complain to the UK's data protection regulator, the Information Commissioner's Office.

Children

ForeverDB isn't directed at children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, the new version will be posted here with a new date.