Privacy

Who operates the Tavern

The operator responsible for this site is WoW Forever Tavern, the YouTube channel and independent World of Warcraft: Forever fan site. This policy covers the Tavern website, rather than Blizzard, YouTube or another linked website.

Privacy contact: contact@forever-tavern.com. You can also find the channel through YouTube @wowforevertavern or the Contact page.

What stays in your browser

The tools use localStorage to remember your choices on this device. This is browser storage, not a login or a tracking cookie.

Plans and notes

Named talent builds, private notes, drafts, recovery copies, gear and raid plans, and Legacy allocations.

Your progress

Quiz answers, quest checklists, pet hunt lists, selected races, read updates and tool preferences.

Repeat-submission flags

When community features are available, local poll-vote flags (tavern:poll-voted:<poll-id>) and exact-build receipts (ff:stats:class-builds:v2) help avoid counting the same choice again in this browser.

These local records do not automatically sync across devices or upload as a private library. Browser settings, private mode or storage limits may prevent saving or remove data.

Delete, export or share

You control local copies. Delete a saved build in the tool, or clear this website’s data through your browser’s site-data settings to remove its localStorage. Export a backup first if you want to keep your builds and notes.

A shared talent link includes game choices such as class, level, Talented perk rank and allocation; it excludes the saved build’s private name and note. A library JSON backup includes names and notes. Anyone you send a link or file to can read what it contains. Page addresses can appear in technical hosting logs; URL fragments are not sent as part of an HTTP request.

Anonymous community polls

When a poll is available, voting submits the poll ID and chosen option. The application stores aggregate option counts, not a voter list. It does not store names, email addresses, IP addresses, cookies, browser IDs or fingerprints with those counts.

A localStorage flag helps avoid voting twice in the same browser. Clearing browser data, using another browser or bypassing the client can allow another submission. Totals therefore describe submitted choices, not verified unique people. Aggregate results may remain visible after a poll closes; there is no record connecting an individual vote to an identity.

The launch-role poll starts with 1,287 historical votes supplied from our YouTube community poll of 14 October 2026: 676 DPS, 390 Healer and 221 Tank. This is a dated aggregate snapshot, not a live import of YouTube voters, accounts or subscriber details. Website votes are counted separately when enabled.

Anonymous build popularity

When build contributions are available, an explicit Save build or successful Copy link action can add that talent allocation to aggregate popularity counts. Merely opening or changing a calculator does not submit a build. Private saved names and notes are never included.

Validation uses the class, talent-data version, character level, Talented Legacy perk rank, talent ranks and action. Stored counters describe a class version, level group and allocation; they do not contain a visitor identity, individual save time, IP address, cookie or fingerprint. A content hash groups identical plans; it is not a person’s identifier.

Browser-local receipts help avoid repeating the same exact plan within a class’s talent-data version. Clearing storage or using another browser can count again. These are submitted plans, not unique players, observed game usage or a strength ranking. If the service is unavailable, private saves, exports and links still work and no sample is invented.

Cookie-free site analytics

This build includes Cloudflare Web Analytics. The optional service is enabled only when the owner enables public indexing and configures its public website token.

If enabled, Cloudflare Web Analytics reports page URL paths, referrers, country, device type, browser, operating system and page-performance measurements. Cloudflare states that it uses no cookies or localStorage for these metrics, creates no individual fingerprint and does not track people across customer sites. The Tavern adds no visitor ID or advertising identifier.

The browser then makes a request to Cloudflare’s beacon service. See the documented metrics, collection details and Cloudflare’s privacy policy. Cookie-free analytics does not mean the network processes no technical request data.

Hosting and service providers

Vercel is the configured public hosting target; a local preview is served from your own computer. When deployed, the hosting infrastructure necessarily handles technical connection and request information, which can include IP addresses, request times, page addresses and security logs. This is separate from the application’s anonymous counters. See Vercel’s privacy notice.

Upstash is the server-side store for aggregate community results when those features are connected. Your browser does not load Upstash code. The Tavern application does not forward the visitor’s IP address or a visitor ID in its storage requests. Upstash may process technical information about its server connections; its own website’s cookie practices do not add cookies to Tavern visitors’ browsers. See Upstash’s privacy policy.

Providers may operate internationally. Their policies explain their own processing, transfers and retention. We do not claim a fixed location or retention period that has not been configured and verified.

Videos, X and source links

YouTube: the initial page shows a local video placeholder. No YouTube player, remote thumbnail or video-provider request loads until you explicitly choose to load the video. The player then uses youtube-nocookie.com, YouTube’s privacy-enhanced mode. After that choice, Google can receive technical request data and apply its own storage and media policies; this mode is not a promise that playing a video is cookie-free or ad-free. See YouTube’s embed documentation and Google’s privacy policy.

X: saved post text is displayed locally. Revealing that text does not load an X widget or contact X. Choosing the original-post link takes you to X, where X’s privacy policy applies.

Purpose and legal basis

We use local choices to provide the tools you request, aggregate results to show community preferences, and limited technical processing to deliver and secure the site. We do not sell personal data, run behavioural advertising or combine these features into a personal visitor profile.

Where personal data is necessarily processed for reliable hosting, security or answering your chosen inquiry, the stated basis is our legitimate interest under Article 6(1)(f) GDPR, subject to necessity and your rights. This is limited to operating the fan site and handling the request; it is not permission to reuse data for unrelated purposes. See the GDPR text.

If you contact us, the message and contact details you choose to provide are used to handle that inquiry and are kept only as needed for that purpose and applicable legal obligations. Please do not include sensitive information that is unnecessary for your question.

Your privacy rights

Where the GDPR applies, you may have rights to access, correction, erasure, restriction, portability and objection, depending on the processing. Contact contact@forever-tavern.com about a request. Where processing relies on consent, it may be withdrawn for future processing.

We cannot identify which fully aggregate poll or build count came from you. We do not collect extra identification data merely to create such a connection. This does not remove rights concerning any identifiable correspondence or technical personal data. You can remove your browser-local data yourself.

You may lodge a complaint with your competent supervisory authority, including Poland’s President of the Personal Data Protection Office (PUODO). How to contact UODO and lodge a complaint.

Children

The Tavern is a general-audience game fan site. We offer no child accounts and do not intentionally ask children to provide personal information. A parent or guardian who believes a child has sent us personal information can use the contact information to ask us to review it. External services have their own age and privacy rules.

Changes to this policy

We update this page when the site’s data practices change and show the review date at the top. Check it before using a newly introduced community feature. The About, Legal and Contact pages identify the project and its sources.