Privacy Policy

The controller responsible for data processing on this website is:

[OPERATOR FULL NAME]
[STREET AND NUMBER]
[POSTAL CODE, CITY]
Email: [EMAIL]

See the Imprint for full details.

• Warcraft Logs profile (required): When you sign in via Warcraft Logs we receive your WCL user ID, display name, character list and guild memberships. This data is stored so you can access your own logs.
• YouTube access (optional, revocable): If you opt in to YouTube linking, we store an OAuth access token and refresh token. We only read videos from your channel whose recording/upload time window overlaps with one of your WCL fight recordings. Titles, descriptions and unrelated videos are not analysed. Every access is recorded in an audit log that you can view at any time.
• VOD mappings: Mapping of WCL fights to video IDs (YouTube/Twitch) including time offsets so playback stays in sync.
• Server logs: Requested URLs, HTTP status, timestamps — for technical stability. No full IP addresses in application logs.

• Art. 6 (1) (b) (contract): processing your WCL data to provide the service.
• Art. 6 (1) (a) (consent): YouTube access, Twitch embed, YouTube embed — each revocable.
• Art. 6 (1) (f) (legitimate interest): technical logs to maintain service operation.

• WCL profile & VOD mappings: until you delete your account.
• YouTube token: until the consent period you chose expires (1 day / 1 week / 30 days / unlimited) or until you revoke it.
• YouTube access audit log: 90 days (automatic deletion).
• Server access logs: at most 14 days (hosting provider).

• Warcraft Logs (USA): OAuth identity, fetching your logs. Transfer under standard contractual clauses.
• Google / YouTube (USA): only when YouTube linking is enabled. Standard contractual clauses.
• Twitch (USA): server-side fetch of public VOD metadata. Standard contractual clauses.
• Hosting provider: [HOSTER NAME, COUNTRY]. Data processing agreement in place.

We use only technically necessary cookies (session cookie for sign-in). When you load embedded YouTube or Twitch videos, your browser fetches content directly from those providers and they may set their own cookies. We obtain your consent before first load and you can revoke it at any time from Settings.

• Access (Art. 15): from Settings — “Download my data”.
• Rectification (Art. 16): by emailing the address above.
• Erasure (Art. 17): from Settings — “Delete account”: immediate full deletion.
• Data portability (Art. 20): covered by the JSON export.
• Withdrawal of consent (Art. 7 (3)): at any time from Settings.
• Complaint: with the data protection authority of your federal state.

All connections use TLS 1.2+. OAuth tokens are stored server-side in a database that is not publicly reachable. Access to your YouTube data is additionally protected by a time-limited consent token.