Privacy Policy

Last updated: 02.10.2026

This policy applies to www.lootguard.de, classic.lootguard.de and midnight.lootguard.de. Sections that concern only one of these sites are marked.

Lootguard is a non-commercial fan project. We use no tracking, no analytics tools and no advertising.

1. Controller

lootguard.de – Raphael Fellenbergc/o Online-Impressum 434Europaring 9053757 Sankt Augustin, GermanyEmail: support@lootguard.de

2. Data We Collect

2.1 Account Data

When signing in via an OAuth provider (Discord or Battle.net), we receive:

• Your email address
• Your display name or username
• Your profile picture (if provided by the provider)

2.2 Player Data

When you link your Battle.net account, we import:

• Your WoW characters (name, realm, class, level)

2.3 Usage Data

Through platform usage, the following data is created:

• Team memberships and roles
• Prio run participation and item selections
• Loot distribution logs

2.4 Technical Data

Each access automatically records:

• IP address (not stored permanently)
• Browser type and version
• Date and time of access

3. Purpose of Processing

• Providing and operating the platform
• Authentication and account management
• Conducting prio runs and loot distribution
• Importing WoW characters via the Battle.net API

4. Legal Basis

• Art. 6(1)(b) GDPR – Processing for contract performance (platform usage)
• Art. 6(1)(a) GDPR – Consent (Battle.net linking, optional features)
• Art. 6(1)(f) GDPR – Legitimate interest (technical operations, security)

5. Third-Party Services

5.1 Supabase

We use Supabase for database, authentication, and real-time features. Data is processed on servers within the EU.

5.2 OAuth Providers

For authentication, we use:

• Discord (Discord Inc., USA) – Email, username
• Battle.net (Blizzard Entertainment, USA) – Email, BattleTag, characters

Data transfers to the USA are based on the EU-US Data Privacy Framework or Standard Contractual Clauses (Art. 46(2)(c) GDPR).

5.3 Netlify

Hosting is provided by Netlify (Netlify Inc., USA). IP addresses may be recorded in server logs.

5.4 Wowhead

To display item tooltips and icons, our sites load scripts, tooltip data and images from Wowhead (wow.zamimg.com, *.wowhead.com). In doing so, your IP address is transmitted to the provider (Art. 6(1)(f) GDPR).

5.5 Raidbots (only midnight.lootguard.de)

If you import a Raidbots report, our server fetches it from raidbots.com. Your browser does not connect to Raidbots; your IP address is not transmitted.

5.6 Character Images (classic. and midnight.lootguard.de)

Your browser loads avatars of your WoW characters directly from Blizzard's image server (render.worldofwarcraft.com). In doing so, your IP address is transmitted to Blizzard Entertainment.

6. Cookies & Local Storage

We only use technically necessary cookies: for authentication (Supabase Auth Session, only classic.lootguard.de and midnight.lootguard.de) and to store your language choice (NEXT_LOCALE). Additionally, we use localStorage for:

• Cookie notice status
• UI preferences (e.g., sidebar state)
• App installation notice (PWA)
• “Reduce motion” setting (only midnight.lootguard.de)

No tracking, analytics, or advertising cookies are used. See our Cookie Policy for details.

7. Storage Duration

Your data is stored as long as your account exists. Upon account deletion, all personal data is irreversibly deleted within 30 days.

8. Your Rights

Under the GDPR, you have the following rights:

• Access (Art. 15) – What data we store about you
• Rectification (Art. 16) – Correction of inaccurate data
• Erasure (Art. 17) – Deletion of your data
• Restriction (Art. 18) – Restriction of processing
• Data Portability (Art. 20) – Export of your data
• Objection (Art. 21) – Objection to processing

You can export your data or delete your account at any time in the settings.

9. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR.

10. Changes

We reserve the right to update this privacy policy as needed. The current version is always available on this page.