Privacy Policy
Last updated: 28 June 2026. This policy explains how MythicPersona handles account, gameplay, log upload, cookie, analytics and advertising data.
1. Data we collect
- Account data such as email, display name, password hash, two-factor status and settings.
- Session and security data such as cookies, CSRF tokens, IP-derived security signals, rate-limit data and audit logs.
- Battle.net-linked World of Warcraft data such as region, realm, character, class, specialization, item level, guild and progression data.
- Desktop app data such as app version, update feed checks, parser state, selected character and uploaded combat log summaries.
- Uploaded run data such as dungeon, keystone level, duration, participants, damage/healing summaries, deaths, interrupts and related combat events.
- Optional analytics or advertising data, only where enabled by your privacy choice or otherwise legally allowed.
2. Why we use data
- To provide login, account security, sessions and two-factor verification.
- To verify World of Warcraft character ownership.
- To show public character, guild, team and progression pages.
- To receive, validate, process and display uploaded run summaries.
- To prevent abuse, fraud, fake data, spam, scraping and unauthorized access.
- To operate desktop downloads, update feeds and service reliability.
- To measure traffic and improve the service if analytics consent is enabled.
- To deliver, measure or personalize advertising if advertising consent is enabled.
3. Public profile data
Public pages may show gameplay identity and progression data: character name, realm, region, class, specialization, guild, team, gear, item level, Mythic+ score, run summaries and similar World of Warcraft information. Public pages must not expose email addresses, OAuth tokens, session tokens, two-factor secrets, private settings or internal worker/admin data.
4. Cookies, analytics and advertising
Essential cookies are used for login, account sessions, security, CSRF protection and abuse prevention. Optional analytics and advertising storage are controlled through the cookie banner. Advertising data may include ad identifiers, ad interaction data, measurement events, approximate location, device/browser information and frequency capping signals depending on the advertising provider and your consent.
5. Third parties
We may use service providers for hosting, storage, databases, email, security, analytics, advertising, payment processing, error monitoring, content delivery or similar operational needs. Third-party providers must only receive data needed for the relevant purpose.
6. Retention
Account, security and audit data are retained as long as needed to provide the service, prevent abuse, comply with legal obligations and resolve disputes. Public gameplay data and uploaded run summaries may remain available while the service operates, unless removed by policy, user request, moderation or technical cleanup.
7. Your choices and rights
You can change optional analytics and advertising choices from Privacy choices. Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing of personal data, and to withdraw consent without affecting earlier lawful processing.
8. Security
Sensitive tokens and secrets should remain server-side only. Sessions should use secure, HTTP-only, same-site protected cookies where applicable, with server-side authorization checks, rate limiting and abuse detection.
9. Children
MythicPersona is intended for users who are old enough to use online account services under applicable law and the relevant game/platform terms.
10. Contact
For privacy requests, contact the site operator through the official MythicPersona account or support channel published on the website.