Privacy Policy
This page explains what WoWMatch collects, why, where it lives, and what you can do about it. It is plain-language boilerplate written by the engineering team and is pending review by counsel — treat the spirit, not the letter, as binding until that review lands.
What we collect
When you sign in with Battle.net we receive your Battle.net account id, BattleTag, and the email address tied to that account. With your permission we then read public character data from the Blizzard API: character names, realm, faction, level, class, race, item level, and recent activity timestamps. As you use WoWMatch we also store the swipes you cast, the matches you create, and the messages you send.
Why we collect it
The data above powers three things: matchmaking (so we can recommend players and guilds you are likely to enjoy), chat (so your matches can talk to you), and recommendations (so the feed improves over time). We do not sell this data and we do not share it with advertisers.
Where it lives
User records, profiles, characters, swipes, matches, and messages are stored in a self-hosted PostgreSQL database on our dedicated server located in the European Union. Data is encrypted in transit over TLS. We retain your data until you delete your account; deletions cascade across profiles, characters, swipes, matches, and messages.
Third parties
We rely on a small set of vendors. Battle.net handles OAuth sign-in. The Raider.IO API supplies public character performance data we display on profiles. Server-Sent Events (and, optionally, Pusher) carry chat traffic in real time. Stripe processes payments if you subscribe to Premium. Transactional email is delivered from our own self-hosted mail server. Each vendor sees only the minimum data required to do its job.
Your rights
Under GDPR and equivalent regimes you can access, export, correct, or delete your data. Self-service tools live in the Settings screen — request an export and you will receive a JSON archive of everything we hold; request deletion and your account, profile, characters, swipes, matches, and messages are removed within thirty days. Backups roll off within a further sixty days.
Contact
Questions, concerns, or formal data-subject requests can be sent to [email protected]. We aim to respond within five business days.
Last reviewed: 2026-05-08. We'll update this when material changes happen — major revisions are emailed.