The short version
- Accounts are optional: you need one only to write comments, and you sign in with Discord or Battle.net. The site is paid for by ads from NitroPay, whose partners can use cookies and your activity on other sites to choose them, in the EU and the UK only with your consent.
- The site itself sets no tracking cookies; the ads can, which is why a consent window asks you first where the law requires it. You can change your choice at any time with the links at the bottom of every page.
- Builds and plans you save stay in your browser. We never receive them.
- Visitors are counted without cookies and without storing your IP address.
- The Forever Master addon, if you install its companion, sends us what your game shows you (drops, prices, creatures, dungeon runs), never your character’s name.
Who is responsible
ForeverChanges (foreverchanges.pro) is published by Waypoint Digital SL. Under the GDPR that company is the data controller for everything described here. For any question or request, write to hello@foreverchanges.pro.
What we collect
When you browse: Cloudflare, our host, receives your IP address and your browser’s details with every request, as any web server must, to deliver the page and to block abuse. Our own request logs are kept for up to a week, to find errors.
Visitor statistics: we use Cloudflare Web Analytics, which our host adds to the pages. It records the page you view (including what you type in the search box, which is part of the page address), the site you came from, your browser, operating system and device type, your country, and how fast the page loaded. The country is worked out from your IP address; the address itself is not stored. It sets no cookie, stores nothing on your device and does not follow you from one visit to the next.
Plausible: we also count visits with Plausible Analytics, open-source software that we run on our own server. It records the page you view, how long you stay on it and how far you scroll, the site you came from, your browser, operating system and device type, and your country, region and city, worked out from your IP address. To count each visitor once a day, it computes an identifier from your IP address, your browser, the site and a secret value that it deletes every 24 hours. The address itself is not stored, no cookie is set and nothing is stored on your device.
The visitor counter in the header: while a page is open, your browser tells us every two minutes that you are still here. To count each visitor once, we compute an anonymous identifier from your IP address, your browser, the date and a secret value. The address itself is not stored, the identifier changes every day, and we delete it within the hour.
What you save: talent builds, Legacy plans and display preferences are kept in your browser’s local storage, on your device, and are never sent to us. Clearing the site’s data in your browser removes them. A share link carries the build in the address itself; we do not store it.
Tier lists: a tier list you make stays in your browser until you save its image, copy it or copy its link. At that moment the list (which entries you put in which tier, not its title) is sent to us and counted in the community ranking, the average of everyone’s lists. It is stored with a random identifier that your browser makes and keeps in its local storage, so that saving again replaces your earlier list and does not count twice. For up to two days it also carries an anonymous identifier computed from your IP address, the date and a secret value, which limits how many lists one address can add in a day. The address itself is not stored.
Gear planner: a set you make stays in your browser. When you press Copy link, the set (its items, enchants, faction and the name you gave it) is sent to us and stored, so that its short link works for anyone who opens it. Nothing else is stored with it.
Corrections: when the correction form is open, it sends us what you enter: the change you report, a link to your source and an optional note. We do not ask for your name or email address, so please leave personal details out of it.
Suggestions: after a few minutes on the site, a note asks what we could improve. If you answer, we store your message and the page you were on, nothing else, so please leave personal details out of it. Your browser’s local storage remembers the time you have spent on the site and that you closed or answered the note, so that it does not come back; this stays on your device.
Accounts and comments: you can read everything without an account. To write comments, you sign in with Discord or Battle.net. They tell us your account’s id and the name it shows (your Discord name or your BattleTag), nothing else: no email address and no access to your account. We store that id and name, the name you choose to show with your comments if you change it, and your comments with the language and time you wrote them. Your comments and the name shown with them are public. If you report a comment, we store your report. You can delete your account, with all your comments, at any time under “Your account” beside any comment form.
The Forever Master addon and its companion: if you install them, the addon keeps what the game shows you while you play: what creatures, chests and gathering nodes drop, what merchants sell and trainers teach and at what price, where creatures stand, their level and the line under an NPC’s name, the herbs, veins, chests and other objects you pass and the markers on your minimap, the quests you open, the prices of the auction house searches you make and of the full auction house scans you start, turn on or that another of your addons runs, the tooltips of items the site has no data for, and your own character’s level, class, race, talents and equipped items. It also keeps your dungeon runs (the dungeon, how long it took, the bosses killed and the wipes, with no names), the experience your kills and quests give and the time you spend at each level, and the item ids on your wishlist. It keeps no character or account name, no chat and nothing about other players. The addon records for us only while the companion is installed. Without it, the addon keeps only the auction prices you scan or search, on your computer, for its own leveling page; they are never sent. The companion app on your computer sends this to us with a random install identifier it receives on its first run. Your realm’s name, the game’s region and whether the realm is Hardcore are sent only with auction prices. We publish those prices for each group of realms (a region, a realm type and a faction) as the median of what the players who scanned it saw, with how many players that was, never who. Each session is sent with the time it started and ended. If you turn on its Auctionator option, it also sends the last seven days of prices from Auctionator’s saved file. It also sends the game’s item cache (Cache/ADB/<locale>/DBCache.bin), which holds only game data, such as items’ stats; you can turn this off in its settings. Apart from the game’s and the addon’s own files, it reads no file. It installs nothing and downloads no code: it writes only the list of what was sent, in the addon’s folder. An upload is stored with the install identifier and the time, not with your IP address. With each upload we also keep a fingerprint of the network it came from, made from the first part of your IP address and a secret key; the address itself is never stored. It serves only to tell whether different installs are really different players, and it is deleted with the upload. We use uploads only to complete the site’s data, such as where an item comes from, how often it drops and what it costs, and we publish only what several players saw.
If you email us: your address and your message.
Other sites your browser contacts
Class icons load directly from Blizzard’s image server (render.worldofwarcraft.com), so Blizzard receives your IP address and browser details when they load, as with any image on the web. Blizzard’s privacy policy covers what it does with them. Other game icons are served from our own domain.
A video on a page loads from its platform only after you press play. Links to Wowhead, Twitch, wago.tools and other sites take you to places with their own privacy policies.
When you sign in, your browser goes to Discord or Battle.net, which see that you are signing in to ForeverChanges, under their own privacy policies.
Advertising
Ads pay for ForeverChanges. They are served by NitroPay, which auctions each ad space among its advertising partners: a video player in a corner of the screen, and a banner at the bottom that you can close. Both have a button to report an ad.
When a page loads, your browser contacts NitroPay and those partners. They receive your IP address, your browser and device details and the page you are on, and use cookies and similar identifiers to remember your consent choice, limit how often you see the same ad, measure ads and fight fraud. With your consent they also use them to show ads based on your interests, drawn from your activity on other sites; without it you still see ads, but not personalized ones.
In the European Union, the United Kingdom and similar places, NitroPay’s consent window asks for your choice before anything that needs consent is stored on or read from your device. The consent link at the bottom of every page opens it again, so you can change or withdraw your consent at any time.
In California and other US states with similar laws, showing ads based on your activity can count as selling or sharing personal information. You can opt out with the opt-out link at the bottom of every page, shown to visitors in those states.
We do not give NitroPay or its partners your name, your email address or anything you type into the site. NitroPay and its partners are separate companies that decide for themselves how they use this data, under their own privacy policies; some are outside the European Union.
Why we are allowed to (legal basis)
Our legitimate interest (Art. 6(1)(f) GDPR): delivering the site and keeping it secure, understanding its audience in aggregate, checking corrections against their sources, and answering you when you write.
For ads: our legitimate interest in funding the site, for showing ads; your consent (Art. 6(1)(a) GDPR, and the ePrivacy rules on cookies) for storing or reading anything on your device and for ads based on your interests. You can withdraw it at any time with the consent link at the bottom of every page.
Who else sees your data
Two providers, bound to process data only on our instructions:
- Cloudflare: hosting, the database and file storage (including accounts, comments, corrections, suggestions, saved tier lists, the visitor counter and the addon’s uploads), visitor statistics and request logs (United States, servers worldwide).
- Resend: carries the email that brings us each suggestion, so it handles the suggestion’s text and the page it was written on (United States).
Cloudflare’s and Resend’s data leaves the European Union. Cloudflare relies on the EU–US Data Privacy Framework where it applies, Resend on the standard contractual clauses in its data processing agreement.
Advertising: NitroPay and its partners receive data from your browser as described under Advertising above. They are not on this list because they are not our processors: each is responsible for its own use of the data.
We will also disclose data if a law or a court obliges us to. Apart from the ads described above, we do not sell or share personal information; the opt-out under the California Consumer Privacy Act and similar US state laws is described under Advertising.
Cookies and local storage
ForeverChanges itself sets no cookies, apart from the sign-in cookies below and CCPAOPTOUT when your browser sends a Global Privacy Control signal (see Your rights in California and other US states). The ads do, as described under Advertising, and only after your consent where the law requires it. When traffic looks unusual, Cloudflare may set a security cookie to tell people from bots. Local storage only holds what you asked the site to keep. Both are strictly necessary for something you requested, which the law exempts from consent.
If you sign in, the site sets fc_session, which keeps you signed in for 30 days or until you sign out, fc_signed, which only tells the page that someone is signed in so it can show your account, and fc_oauth and fc_signin for the few minutes a sign-in takes. They hold no tracking identifier and are strictly necessary for the sign-in you asked for.
How long we keep it
- Request logs: up to a week.
- Visitor counter identifiers: under an hour.
- Visitor statistics: they hold no name, email or IP address, and we keep them to compare traffic over time.
- Corrections: as long as the entry they concern is on the site.
- Tier lists: as long as the community ranking is on the site. The identifier computed from the IP address is erased within two days.
- Sets shared from the gear planner: as long as the planner is on the site, so that their links keep working.
- Suggestions: until we have acted on them or set them aside, two years at most.
- Accounts and comments: until you delete them. Deleting your account deletes your comments and reports with it.
- The addon’s uploads: 90 days. The totals made from them hold nothing about you and stay as long as the site shows them.
- Emails: as long as the conversation needs.
- Advertising data: NitroPay and its partners keep it under their own policies.
Your rights
Under the GDPR you can ask for a copy of your data, have it corrected or deleted, restrict or object to its use, and take it elsewhere. Write to hello@foreverchanges.pro and we will answer within a month. We do not know who you are from the statistics, so tell us what would help us find your data, such as the date and content of a correction you sent. For the addon, the companion shows its install identifier: send it to us and we delete everything uploaded with it.
If you have an account, you can delete it yourself, with all your comments, under “Your account”.
If you think we have handled your data badly, you can complain to your national data protection authority. We would rather you told us first so we can fix it.
Your rights in California and other US states
If you live in California or another US state with a similar privacy law, this section applies to you on top of the rest of this policy.
What we collect, in these laws’ categories: identifiers (your IP address, and the cookie and device identifiers the ads use); internet activity (the pages you view and how you use them, the site you came from); approximate location (country, region and city, worked out from your IP address); and what you choose to send us (corrections, suggestions, saved tier lists and gear sets, emails). It comes from you and your browser, and we use it for the purposes described above: running and securing the site, counting visitors, the features you use, and ads. How long we keep each kind is under How long we keep it.
Selling and sharing: we do not sell personal information for money. But letting NitroPay and its advertising partners collect identifiers and internet activity on our pages, to show ads based on your activity on other sites, can count as “selling” or “sharing” for cross-context behavioral advertising. We do this, and have done so in the past 12 months, with advertising networks and ad technology companies. We do not knowingly sell or share the personal information of anyone under 16, and we do not collect sensitive personal information.
Opting out: use the “Do Not Sell or Share My Personal Information” link at the bottom of every page, shown to visitors in these states. If your browser sends a Global Privacy Control signal, we treat it as the same opt-out: the site then sets a cookie, CCPAOPTOUT, that tells NitroPay and its partners not to sell or share your data from that browser.
Your other rights: you can ask to know what personal information we have about you and to have it corrected or deleted, and using these rights will not change how you are treated. Write to hello@foreverchanges.pro; we confirm that we received your request within 10 days and answer within 45. An authorized agent can also write for you. We do not know who you are from the statistics, so tell us what would help us find your data, such as the date and content of a correction you sent. NitroPay and its partners answer for the data they hold themselves.
Children
ForeverChanges is not directed at children under 13, and we do not knowingly collect data about them.
Changes
If we change how we handle data, we update this page and the date at the top. Who stands behind the site is in the legal notice; the rules for using it are in the terms of use.