Privacy

Who is responsible

Widsith is run by Reflective Grove LLC (New Mexico, United States). Questions about your data go to info@widsith.app. How to delete what we keep, get a copy of it, or ask us about it is on the Your data page.

What a recording contains

The addon writes what happens to your character in the game: the character’s name, realm, class and a game identifier; its guild and rank; positions on the map; levels, experience and money; gear, talents, buffs, mounts, currencies and achievements; quests, kills, loot, deaths, professions and reputation; what creatures and bosses say nearby; the emotes you use and when you take a screenshot; the characters you grouped with, by name and game identifier; trades, with who you traded with and what changed hands; and when each session began and ended. It does not record your account name, your email address or anything outside the game.

Widsith keeps and shows nothing that players type in chat. Older versions of the addon also wrote what your own character said aloud in /say and /yell. Those lines are dropped from a recording before anything is sent to us, and before a recording is shown in your browser, so they are never kept on our servers and never shown to anyone. The addon has never recorded what other players say, or whispers, party, guild or any other channel.

Your account

When you sign in, Battle.net tells us your BattleTag, your account’s permanent Battle.net ID, and which characters are on your account in each region, with each one’s name, realm, level and class. We keep those so that you can sign in again and so that a character you bring can be shown to be yours. Battle.net never gives us your password or your email address, and we ask it for nothing more. The list of characters is replaced each time you sign in. Your BattleTag is shown to you, in the Widsith Uploader once a computer is linked, and to us when we run the site, such as beside a report you file; it is never shown to other players. Blizzard lets us keep what Battle.net tells us for thirty days, so if you don’t sign in for thirty days the list and your BattleTag are cleared, and signing in again brings them back; your account and the characters you keep stay as they are, and a linked computer goes on sending for them. All of it is deleted when you delete your account.

Where recordings are kept

• Watching needs nothing; keeping needs an account. You can open a recording and watch it without signing in. Nothing is sent, and this browser remembers only the recording you are watching (in its storage, IndexedDB) until you open another or clear this site's data. To keep a character, you sign in with Battle.net and choose, once per character, who can see it: Public (on our servers, on the boards and open to others) or Private (on our servers, seen by no other player). Every later file for that character follows the choice, and you can change it any time on the character's page.
• What is public. Everything a Public character recorded can be watched by anyone, with the time each thing happened, so others can see when you play. A run on a board shows the character’s name, realm and class, the time, the date and the route, and can be watched as a replay. A Public character’s page and its runs can also be found through search engines, and are shown as a preview when someone shares a link to them. Nothing about a Private character is ever found or shown that way. When a Public character goes Private, its preview can stay in caches for about a day, and a preview another site has already made of a shared link stays for as long as that site keeps it. In a game that has no public leaderboards on Widsith yet, a Public character is seen by you alone until that game opens here; the game switch in the header shows which games are open, and the choice of Public says so for a game that isn’t. A replay names the characters you grouped with and traded with, as the game recorded them. If you find your own character named in someone else’s replay and want it hidden, write to us and we will hide it. Nothing a player typed in chat is shown, yours or anyone else’s. A character Battle.net can’t vouch for yet has the words “Not yet verified” beside its name wherever it is shown.
• How a character is shown to be yours. A character Battle.net lists on your account is verified as yours. We read that list only when you sign in, so a character you made since then isn’t on it yet. We keep it anyway, and if it is Public it is shown everywhere as not yet verified until you next sign in. Battle.net can’t list WoW Forever characters yet, so those stay not yet verified for now. Another account that brings a character you keep is told only that it is kept elsewhere. If Battle.net later lists a character on a different account from the one that keeps it, that account takes it over and starts afresh, and the first copy is set aside at once. Nobody sees a copy that is set aside. We keep it with its sessions for thirty days, so that we can put it back if the change was a mistake, and then delete it. If you delete your account, any copy of yours that is set aside is deleted with it.
• The uploader. The Widsith Uploader is an app you can install to send your recordings for you. When you link a computer to your account, we keep the name that computer gave itself, when it was linked and when it last sent anything, so that it can be listed under Linked computers in Settings and you can unlink it there. The uploader holds a code of its own that lets it send sessions, ask which characters you keep so that it can list them, and unlink itself, and nothing else: it can’t read a recording, change who sees a character or delete anything. Our server keeps only a scrambled copy of that code. It sends the same sessions you could bring by hand, and nothing until you have started uploading, with your characters listed so that you can leave any of them out first. A character you remove on Widsith isn’t sent again until you switch it back on in the uploader. Unlinking a computer removes its entry, and what it already sent stays until you delete it. A computer that more than one Battle.net account plays on is linked once per account, each with its own code, and each account’s recordings are sent only under its own link. The uploader tells the accounts apart by the folders the game keeps for them, and an account nobody has linked sends nothing.
• Pictures, mounts and your realm’s clock. When you watch a replay, the site asks our server for portraits (of your character, and of anyone you grouped with, by their character name, realm and region), for the mounts you rode (by mount ID), for the icons and quality of the gear you wore (by item ID) and for your realm’s time zone (by realm and region). The home page and the page that lists your characters ask for their portraits in the same way, including one you are only watching: its recording is never sent, but its name, realm and region are, to find the picture. Our server asks Blizzard’s public game data and profile services and sends back the time zone, the qualities and the addresses of the pictures. Your browser then loads those pictures straight from Blizzard’s image servers, so Blizzard sees your IP address and browser, as any website you load images from would.
• Your character on the armory. For a character kept on Widsith, our server asks Blizzard’s profile service for what the armory shows of it. That is the character’s level, race, class, specialisation and guild, its stats and the gear it wears, its achievements with the dates they were earned, the game’s own counters, its reputations, its mounts, pets and toys, its dungeon and raid kills, how many quests it has completed, and the addresses of its pictures. We ask when you sign in, for the characters on your account that are kept here, when a character’s page is opened and our copy is more than an hour old, and once a day for a batch of the copies that have gone longest without, so that none nears thirty days. Blizzard’s terms let this be kept for thirty days at most, so every copy is refreshed or deleted within that time. It is deleted at once when the armory stops listing the character, when you delete the character from Widsith, or when you delete your account. These parts of a Public character’s page are shown to anyone with the link, and of a Private character’s to you alone. The recording itself is never sent to Blizzard. One line of our own may outlast the copy, which says whether the armory’s counters and the recording agreed when they were last compared, and when; it is kept in your browser with the recording. Blizzard sees our server’s requests rather than your browser, except that achievement icons load from Blizzard’s image servers as the portraits do. What Blizzard’s services give us is shown as it comes; neither we nor Blizzard promise that it is complete or right.
• Names of items and quests. In a replay and on a character’s page, item, creature and quest names and tooltips come from Wowhead, loaded from their servers. Wowhead sees your IP address, the pages you open it on and the game IDs in those links. When we last checked, on 14 October 2026, its script set no cookies and stored nothing in your browser. Their privacy policy applies to what they see, and to their own site when you follow a name there: a quest, item or creature in a feed is a link to Wowhead, opened in a new tab. The home page, the leaderboards, a quest’s page and these pages load nothing from Wowhead. Everywhere else, item names come from our own copy of Blizzard’s game data, and quest and creature names from what the addon recorded. Nothing about you is involved in either.
• Map art, class icons and logos. The map a replay is drawn on, the class icons in a character’s face and the games’ logos are Blizzard’s art, kept in our own storage and loaded from there. That storage is Vercel’s, under its own address, so Vercel sees your IP address as it does for the rest of the site. Nothing about you goes to Blizzard for them.
• Who you follow. The characters and players you follow are remembered so your feed can be put together. Signed out, the list is kept in this browser. Signed in, it is kept with your account too, so it reaches every device. Nobody else sees whom you follow. The feed says only what Public characters did, as their own pages already do.
• Your player page. If you choose to have one, it shows the name you chose and every character you keep Public, so anyone can see that those characters are yours. It never shows your BattleTag, a Private character or one you have only watched. Anyone signed in can report the name to us, and we may clear it. Taking the page down removes it and its name at once.
• Players like you. Signed in, the Highlights page suggests Public characters like the ones you keep on Widsith, Private ones included, matched on level, realm, how much you play and what you spend it on. Nothing is sent from your browser for it, and a recording you only watched, without keeping it, is never used. The match is worked out when you ask and isn’t stored. If you and another player both turn on matching by when you play, your hours are compared too. They are never shown, but a match tells each of you that the other plays at the same times.
• Reports. When you report a run or a player’s name, we keep the report with your account beside it, so that we can come back to you about it. When you tell us a session was judged wrongly, we keep what your browser said disagreed and the addon version that wrote it.
• What you send from the support page. When you send a bug, an idea or anything else from the support page, we keep what you wrote with your account, so that we can look into it and you can see whether it has been dealt with. With it we keep your browser’s description of itself (its name, version and operating system), so that we can find a problem that depends on the browser. We see your BattleTag beside it. Nobody else sees it. You can delete a report from the support page at any time. Please don’t put passwords, email addresses or anything else personal in a report; we don’t need them and would rather not hold them.
• Your votes on the roadmap. When you vote for something on the roadmap, we keep that your account voted for it, so that you can take the vote back. Anyone can see how many votes an item has. Nobody sees who voted, and you see only your own.
• Improving the site. We may study the recordings kept here, Public and Private alike, to find faults and make Widsith better. That might mean working out why a recording was read wrongly, or how quickly characters level on average. To test a fix we may copy a recording to one of our own computers, and we delete the copy when that work is done. Nothing from a Private character is ever shown to anyone because of this. Anything we publish from it is a total that can’t be traced to a character or a player. A recording you only watched, without keeping it, never reached us and is never used.
• Server logs. Like any website, our hosting provider records technical details of requests (IP address, browser, time, page) to keep the service running and secure. We don’t use them to build profiles, and they are deleted on the provider’s normal schedule. We also count how many times the addon and the uploader are downloaded from this site, and how many recordings are opened on it, as a number for each day and nothing more.
• Counting page views. We count visits with Vercel Web Analytics, which runs on our own address and sets no cookie. For each page view it records the page’s address (which carries a character’s or player’s name when you open their page), the page that linked to it, your country and region, your browser, your operating system and whether you are on a phone, a tablet or a desktop. Visits are told apart by a code made from the request, which is thrown away after 24 hours, so nothing follows you from one day to the next or across other sites. We see totals, never a person.

Who handles it for us

Widsith runs on Vercel, which hosts the site, stores the recordings and keeps the server logs and the page-view counts, and on Neon, which holds the database. Both are in the United States, and each handles the data only on our instructions, under its published data processing terms, which include the European Union’s standard contractual clauses for data that comes from Europe. The only other place a recording is ever kept is one of our own computers, when we copy it to test a fix. Blizzard and Wowhead see what the sections above describe, under their own terms, and nothing else. Nobody else gets any of it, and we never sell it.

Why we may handle it

Where the law asks us to say so: we keep your account, your recordings, your follows, your settings, the reports you send us and your votes because you asked for them, as the service you signed up for. We show the characters you grouped and traded with, keep the armory’s answer, moderate the boards, keep a note of what was deleted, keep the server logs, count page views and keep a refused upload for a look because the site needs those to work and to stay fair, which the law calls our legitimate interest. Studying kept recordings to fix and improve the site, and suggesting players like you, are our legitimate interest as well, and you can object to either as described below. Neither decides anything about you beyond what the site shows you. Nothing here rests on your consent, so there is nothing to withdraw; instead, everything can be deleted.

How long we keep it

• Your account and everything in it: until you delete it from Settings.
• Your BattleTag and the list of characters Battle.net gave us: thirty days from your last sign-in, then cleared until the next.
• A character and its sessions: until you delete the character or your account.
• A copy set aside when a character changed hands: thirty days, then deleted.
• The armory’s answer: thirty days at most, refreshed or deleted.
• A linked computer’s entry: until you unlink it.
• A report you send from the support page: until you delete it or your account, even after we have dealt with it, so that you can still see it.
• A vote on the roadmap: until you take it back or delete your account.
• A sign-in: thirty days, or until you sign out.
• An upload we refused because it didn’t match what we already held: kept aside for a look, until the character or the account is deleted.
• After you delete a character, a note of which sessions were deleted, by the character’s game identifier and the session’s time, so that a file sent again later doesn’t bring them back. Reports and the record of runs taken off the boards keep the character’s game identifier too. None of these holds your BattleTag or anything from the recording.
• A copy of a recording taken to test a fix: until that work is done.
• Our database provider keeps a rolling history so that a mistake can be undone. Something deleted leaves that history within thirty days.
• Totals worked out from many recordings, which name no one: kept.
• Server logs: on Vercel’s normal schedule.
• The page-view code: 24 hours. The totals are kept.

What we don’t do

No advertising, no tracking across sites, and no selling of data.

Your choices and rights

You can delete a character from its page, download it again as a file, unlink a computer, take down your player page, delete a report or take back a vote, and delete everything you keep here together with your account, all from the site; the Your data page says where each one is. If your character is named in someone else’s public replay, write to us and we will hide it.

Wherever you live, you may ask us what we hold about you, have it corrected or deleted, get a copy of it, object to how we handle it or ask us to stop. If you live in the European Union, the United Kingdom or somewhere with a similar law, these are your rights under it, and you may also complain to your data protection authority. Write to info@widsith.app and we will answer within a month. Because we hold no email address for you, we may ask for your BattleTag and ask you to confirm it by signing in. We make no decisions about you by machine.

Children

Widsith is not directed at children under 13, and we don’t knowingly handle their data. If you think a child has made an account, write to us and we will delete it.

Changes

If this changes, the date at the top changes with it, and a change that matters is announced on the site, and in the uploader, at least fourteen days before it applies, unless the law requires a change sooner. See also the cookies and storage page and the terms.