Privacy Policy

Last updated: September 26, 2026

What This Site Is

Warcraft Tools (warcraft.tools) is a collection of free utilities for World of Warcraft players. We provide tools like character dashboards, name searches, price checks, a mount color palette, and a name generator.

Data We Collect

Battle.net Login

If you choose to log in, we use Blizzard's official OAuth system. We receive your BattleTag and account ID. We never see or store your Battle.net password. Your login session is stored in a secure, signed cookie.

Character Data

When logged in, we fetch your character data from Blizzard's API (characters, mounts, pets, toys). This data is cached on our server to reduce API calls and is not shared with third parties. We delete it 30 days after your last refresh. Your dashboard settings stay, so signing in again just fetches fresh data.

To make the Name Generator's suggestions sound more like real World of Warcraft names, it learns how character names are put together: which sounds tend to follow which, for each race. It keeps those patterns, never the names themselves, and it won't suggest a character name it learned from.

Analytics

We use Google Analytics (GA4) to understand how people use the site — page views, traffic sources, and general usage patterns. Google Analytics uses cookies to distinguish users. No personally identifiable information is sent to Google Analytics.

There are no ads on this site. For more information about how Google uses data from sites that use their services, visit Google's privacy page.

Contact Form

If you send a message through the contact form, we receive your email address, the optional name you give, the part of the site it's about, your topic and your message. If you're signed in, your BattleTag is attached so issues are easier to trace. Messages are delivered by Formspree and used only to reply to you. The form's human check runs entirely on your device and our server; no third-party captcha or tracking is involved.

To stop spam, we count how many messages come from each IP address. The address is stored only as a one-way hash, and each count is deleted once its time window ends (at most a day). We also keep a short delivery record for each message: the time, the topic, the part of the site and whether Formspree accepted it. That record never includes your email address, name or message.

After you send a message, your browser remembers the time (local storage key wt_contact_sent) so the form can tell you it already went through if you come back within half an hour. It never leaves your browser.

Consent & Cookie Settings

If you visit from the European Economic Area, the United Kingdom, or Switzerland, analytics cookies are off by default. Google Analytics runs in a restricted mode that sends cookieless, anonymous pings and sets no _ga cookies unless you allow it. We don't show a pop-up; you can opt in whenever you like.

Visitors from other regions have analytics cookies enabled by default and can opt out the same way.

To change your choice, use the Cookie Settings link in the footer of every page. It opens a small panel with Allow analytics and Decline. Open cookie settings. Your choice is saved in your browser's local storage (key wt_consent), not in a cookie, and is passed to Google using Google Consent Mode on every page. Declining also removes any existing Google Analytics cookies for this site. Clearing your browser's site data resets the choice to your region's default.

Analytics only runs on the live site (warcraft.tools). Our development and staging sites don't load it at all.

Cookies We Use

Cookie	Purpose	Duration
wow_auth	Keeps you logged in	30 days
PHPSESSID	Session management	Session
wt_region	Which Battle.net region you picked (US, EU, KR or TW), so the dashboard shows that region’s characters	1 year
_ga, _ga_*	Google Analytics (only with analytics consent)	Up to 2 years

Third-Party Services

• Blizzard Entertainment — OAuth login and game data via their official API
• Google Analytics — Anonymous usage statistics
• Formspree — Delivers contact form messages

Your Rights

• Use the site without logging in — most tools work without authentication
• Change or withdraw your consent any time via Cookie Settings in the footer
• Clear your cookies at any time to reset tracking

Data Retention

Cached character data is stored on our server and refreshed when you use the dashboard. If you stop using the site, your data remains but is not actively processed. We do not sell or share your data with anyone.

Children

This site is not directed at children under 13. We do not knowingly collect personal information from children.