Privacy policy
Who we are
WoW Campfire (https://wowcampfire.com) is run by Future Developments s.r.o., IČO 03472451, DIČ CZ03472451, Rybná 716/24, Staré Město, 110 00 Praha 1, Czech Republic, entered in the commercial register kept by the Municipal Court in Prague, section C, insert 231242 ("we"). We are the controller of the personal data described here: we decide how it is used. Contact: info@wowcampfire.com, in English or Czech. We have no data protection officer because none is required.
We get data from you (what you type or choose) and from your browser when it loads our pages.
What we collect and why
Visiting the site
Our host, Vercel Inc. (USA), serves the site worldwide and keeps standard request logs: your IP address, browser details (user agent), the time, the referring page and the address of each page you request, which includes anything you type into site search. We use them to deliver the site and keep it secure. Legal basis: our legitimate interest in a working, secure site (GDPR Art. 6(1)(f)).
Ask Campfire
Ask Campfire is an AI chat. Your question goes to Anthropic, PBC (Claude API, USA) with relevant Campfire articles and the earlier finished questions and answers in the conversation, so Claude can write the answer.
- We store no chat history. The conversation exists only in your open browser tab. In the Ask Campfire drawer, it can be kept when you move to another page of our site, and is then sent with your next question in the drawer. It is gone when you reload the page, close the tab or press "Start over". Each finished answer carries a code from our server, so your browser can send it back with your next question.
- To prevent abuse, our server holds your IP address and the times of your recent questions in memory only, never on disk, in a database or in Ask Campfire's logs. They are forgotten when that server instance stops or, at the latest, with its first question after midnight UTC.
- Ask Campfire's logs record technical details such as the articles used, the model and the cost, not your question. Our host keeps them with the request details for a limited period.
- Anthropic gets your question and the conversation, but not your IP address or any identifier from us. It processes them for us under its commercial terms and data processing terms, which exclude training models on them. Anthropic keeps API data for the period its policies set: https://www.anthropic.com/legal/privacy.
Please don't type personal information. Legal basis: our legitimate interest in answering your questions and preventing abuse (Art. 6(1)(f)).
Your account
You can sign in with an emailed code or an email address and password. Where a social sign-in button is available, it uses your chosen provider and Supabase to sign you in. Accounts run on Supabase (Supabase, Inc.), with the database in the EU (Frankfurt). We store:
- your email address and account ID
- sign-in times
- the #tags you pick to personalise the homepage
- item IDs you save as favourites to your account
- the public display name, handle and profile pictures you choose, and comments you post
Supabase handles passwords and any connected sign-in identity. Your public profile and comments are visible to other visitors; your email address, homepage tags and favourites remain private. Public profile records also include your account identifier. Profile pictures are stored in a public Supabase Storage bucket. Replacing or removing a picture from your profile does not delete earlier uploaded picture files; they remain until account deletion.
Supabase also processes sign-in and session information, including IP addresses and browser details, to keep accounts secure. Legal basis for these records: our legitimate interest in account security (Art. 6(1)(f)).
We send sign-in, email-confirmation, password-recovery and password-change verification codes through Resend (Resend, Inc., USA). Supabase sends no email for us.
You can delete your account and its data on your account page or by emailing us. Legal basis: providing the account you asked for (Art. 6(1)(b)).
Analytics and advertising (only with consent)
No analytics or advertising script loads until you allow it in the cookie banner. We treat a Global Privacy Control signal from your browser as "Reject all".
- Google Analytics 4 (Google Ireland Ltd / Google LLC), ID G-M1VKY2W155, measures our audience. GA4 does not store IP addresses. Google processes this data for us under its data processing terms. Google's advertising features and data sharing for Google's own products are off.
The advertising pixels below help us measure and improve our social media campaigns and build advertising audiences. They send the platform the pages you view (including search terms in the address), your IP address, browser and device details, and cookie or click identifiers, which the platform may link to your account with it. The pixels do not read what you type into forms, and we never send your email address to advertising platforms: automatic advanced matching is off on every pixel, and no pixel runs on account or sign-in pages.
We and each platform are joint controllers for collecting and sending this data. For its own later use, the platform is an independent controller. You can exercise your rights with us or with the platform.
- Meta Pixel (Meta Platforms Ireland Ltd), pixel 4549334078713283: joint-controller terms, privacy policy
- Reddit Pixel (Reddit, Inc.), pixel a2_jxbqgd385lew: privacy policy
- X Pixel (X Corp.), pixel ri3sd: privacy policy
Legal basis: your consent (Art. 6(1)(a)). Change or withdraw it at any time with "Cookie settings" in the footer.
Blizzard images
Game icons and some artwork load directly from Blizzard Entertainment's servers (render.worldofwarcraft.com and bnetcmsus-a.akamaihd.net). Your browser requests them from Blizzard, which receives your IP address, browser details and the fact that the request comes from our site. Blizzard Entertainment, Inc. uses this as an independent controller (Blizzard privacy policy). Legal basis: our legitimate interest in showing the game's own icons, which item, talent and class pages need (Art. 6(1)(f)).
Emails to us
If you email us, we use your address and message to reply. Our mailboxes are hosted by Forpsi (Czech Republic). Legal basis: our legitimate interest in answering messages (Art. 6(1)(f)), or our contract with you (Art. 6(1)(b)) when it is about your account.
Some features keep data only on your device; see our Cookie policy.
What you have to provide
Browsing needs nothing beyond what your browser sends automatically. Ask Campfire needs the question you type. Analytics and advertising are optional; refusing them changes nothing on the site. No law requires you to give us data. An account needs an email address; without one we can't give you an account.
Automated decisions and profiling
We make no decisions based solely on automated processing that have legal or similarly significant effects on you (Art. 22). If you allow advertising cookies, the platforms use your visits to place you in audiences for our ads. That is profiling, and it happens only with your consent. Ask Campfire's automatic limits only pause the feature.
Who receives data
- Processors acting for us, each under its data processing terms: Vercel (hosting), Anthropic (Ask Campfire), Google (Analytics), Supabase (accounts), Resend (sign-in emails) and Forpsi (our mailboxes).
- Independent controllers: Blizzard for its images, and the advertising platforms for their own use of pixel data.
International transfers
These recipients may process data outside the European Economic Area: Vercel, Anthropic, Google, Supabase, Inc. (support and sub-processors; the database is in Frankfurt), Resend, Inc. and the advertising platforms we use (Meta, Reddit, X). Where a recipient is certified under the EU-US Data Privacy Framework (an EU decision that certified US companies protect data adequately), we rely on that; otherwise on Standard Contractual Clauses (EU-approved contract terms). Ask us at info@wowcampfire.com for a copy of the clauses.
How long we keep it
- Server logs: a limited period, per Vercel's defaults.
- Ask Campfire: no conversations; IP addresses and question times as described above.
- Google Analytics: user- and event-level data is deleted after 14 months; aggregated reports that identify no one may be kept longer.
- Advertising platforms: audiences we build from site visits keep you for at most 180 days, as set in each platform. The platforms keep pixel data under their own policies.
- Account data, public profiles and uploaded profile pictures: until you delete your account. Comments remain until you remove them or delete your account. Database backups keep deleted data for up to 7 more days.
- Supabase’s hosted authentication logs: up to seven days on our current plan, separately from your account data.
- Sign-in emails: Resend keeps its delivery records for a limited period.
- Emails to us: up to 24 months.
- Your cookie choice: in your browser only, for 12 months, then we ask again. We keep no record of it on our servers.
Your rights
Under the GDPR you can ask for access to your data and for its rectification, erasure, restriction or portability. You can withdraw consent at any time; this does not affect processing before you withdrew. Email info@wowcampfire.com. We reply within one month (up to three for complex requests, and we will tell you) and may ask you to confirm who you are.
Right to object. You can object at any time to processing based on our legitimate interests: server logs, Ask Campfire and its abuse limits, sign-in records, Blizzard images and emails. Email info@wowcampfire.com.
You can complain to Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz, or to the authority where you live, work or the alleged infringement took place.
California and other US residents
We do not sell personal information for money. If you accept advertising cookies, our use of the pixels may count as "sharing" for targeted advertising under California law. You can refuse or withdraw it in "Cookie settings", and we treat Global Privacy Control as "Reject all".
Children
WoW Campfire is for a general audience and not directed to children under 16. We do not knowingly collect children's data. If you think a child has given us data, email us and we will delete it. Accounts require age 16 or older.
Changes
If our practices change, we update this page and its date. Before a significant change applies, we email account holders at least 30 days ahead and show a notice on the site.
Contact
Future Developments s.r.o., Rybná 716/24, Staré Město, 110 00 Praha 1, Czech Republic. info@wowcampfire.com
