Privacy

Эта страница еще не переведена, поэтому показана на английском.

Обновлено 25 окт. 2026 г.

RavenTome is a free fan site. You can read all of it without an account. This page explains what data is processed and what your rights are.

The short version

• Reading needs no account. No ads, no tracking cookies, no analytics script.
• Your settings stay in your browser unless you sign in.
• Accounts and the newsletter are optional. We use their data only to run them.
• We never sell data or use it for advertising.
• You can download or delete your account at any time.

Who is responsible

RavenTome is run by one person in Vienna, Austria (GitHub: @yusufdanis). That person decides how this data is used, so they are the “controller” under the EU General Data Protection Regulation (GDPR). Details are in the imprint.

Contact: [email protected], subject “Privacy”.

Reading the site

Hosting and security

• What: Cloudflare hosts the site. When your browser asks for a page, Cloudflare receives your IP address, the page address and time, and what your browser sends with every request (browser type, operating system, language, the page you came from).
• Why: to deliver pages and block attacks. Cloudflare’s security checks can set short-lived security cookies. They are strictly necessary and never used for advertising.
• What we see: totals, and the requests Cloudflare blocked or flagged, with IP address, country, browser and page.
• How long: security records up to 31 days. If you use the account features, our server code may also keep technical logs, including IP addresses, for up to 7 days to fix errors and stop abuse.
• Legal basis: our legitimate interest in a working, secure site (GDPR Art. 6(1)(f)).

Visit statistics

Cloudflare counts visits from its own server records. Nothing runs in your browser for this. We see totals only, never individual visitors. Legal basis: our legitimate interest in knowing what to improve (Art. 6(1)(f)).

Settings in your browser

The site remembers some choices in your browser’s local storage: language, region, faction and ruleset, your answer to “Where are you coming from?”, checklist ticks, theme, and your choices on Run Sheets and in the Build Checker. They are saved only when you make a choice. They stay on your device and are never sent to us. To remove them, clear this site’s data in your browser.

Your account (optional)

You sign in with a one-time link we e-mail to you, or with Battle.net. There are no passwords. We need only your e-mail address or a Battle.net sign-in; everything else is optional.

• What we store: your e-mail address; your BattleTag and Battle.net account ID if you use Battle.net; your language and region; the characters you add (name optional; region, ruleset, faction, race, class, spec, professions, level); what you follow; when you joined and last signed in.
• Why: to run the account you asked for (Art. 6(1)(b)).
• Battle.net: you log in on Blizzard’s own page. Blizzard then sends us your account ID and BattleTag, nothing else. We never see your password or your characters. As Blizzard’s rules require, we keep your BattleTag for at most 30 days after your last Battle.net sign-in, and delete your Battle.net data at once if you unlink it.
• Sign-in links work once and expire after 15 minutes. Unused links are deleted within 24 hours.
• Sign-in cookie: after you sign in, one cookie keeps you signed in for up to 90 days. It is needed for the account you asked for, so we do not ask for consent. Signing out deletes it.
• How long: until you delete the account. If you do not sign in for 24 months, we delete it, after a warning e-mail 30 days before. Deleted data leaves our backups within 30 days.
• Your controls: change, download (as a JSON file) or delete everything on your account page.

Newsletter (optional)

• How it starts: you sign up, we e-mail you a confirmation link, and nothing else arrives until you click it. Unconfirmed sign-ups are deleted after 7 days.
• What we use: your e-mail address and language. If you have an account, we pick topics from the classes and professions of your characters. Nothing else.
• No tracking: our e-mails have no tracking pixels and no tracked links.
• Why: your consent (Art. 6(1)(a)). Withdraw it any time with the one-click unsubscribe link in every e-mail, or on your account page.
• How long: until you unsubscribe. We then remove your address from the list at once. We keep the dates you subscribed and unsubscribed for up to 3 years, to show that we had your consent.

Bot check on forms

The sign-in and newsletter forms use Cloudflare Turnstile to stop bots. It runs only on those forms, and only when you use them. To tell people from bots, Cloudflare receives your IP address and browser details and may store a small value in your browser. Cloudflare uses these signals for our check and, on its own account, to improve its bot detection (Turnstile privacy addendum). Legal basis: protecting the forms from abuse (Art. 6(1)(f)). We use it only to secure a form you chose to use, so we do not ask for consent.

E-mails to us

• What: your e-mail address, your name if you give it, your message and any attachments.
• Why: to answer you, fix wrong lines, and handle requests and legal notices (Art. 6(1)(f); for legal duties, Art. 6(1)(c)).
• How long: while the matter is open, then at most 12 months after the last message, unless we need it longer for a legal claim or duty.

We never publish your name or e-mail address. Please leave out personal details we do not need.

Donations

• The “Support RavenTome” button is a plain link to GitHub Sponsors. Nothing is sent to GitHub until you click it.
• GitHub and its payment partner Stripe handle the payment. GitHub is its own controller under the GitHub General Privacy Statement. Whether GitHub shows your sponsorship publicly is your choice there.
• What we see: your GitHub account, the tier, amount and dates, and for tax records the country or region of the payment and whether you pay as a business. GitHub never shares your e-mail address with us.
• Why: to thank you and keep payment records (Art. 6(1)(f), and Art. 6(1)(c) where tax law requires records).
• How long: as long as tax law requires, at most 7 years.

Donations buy nothing. We do not list donors on RavenTome.

Who receives data

• Cloudflare, Inc. (USA): hosting, the account database, security, visit statistics and the bot check. It works for us as our processor. For some of its own purposes, such as protecting its network and improving its bot detection, it acts on its own account (privacy policy).
• Our e-mail providers: send sign-in links and newsletters, and hold our mailbox. They work for us as our processors.
• Blizzard Entertainment: only if you sign in with Battle.net, under its own privacy policy.
• GitHub, Inc.: only if you donate.
• Authorities: only when the law requires it.

Nobody else. We never sell data or share it for advertising.

Data outside the EU

Cloudflare, Blizzard and GitHub are based in the USA. Cloudflare relies on the EU-U.S. Data Privacy Framework, with the EU standard contractual clauses as a fallback. With Blizzard and GitHub, you deal with them directly under their own terms.

Your rights

• See the data we hold about you, and get a copy.
• Correct it, delete it, or limit its use.
• Get your account data as a file (JSON) to take elsewhere.
• Object to processing based on our legitimate interest.
• Withdraw consent at any time, for example for the newsletter.

These rights apply wherever you live. Most of them work on your account page. Otherwise write to [email protected] with the subject “Privacy”. We answer free of charge within one month.

You can also complain to a data protection authority. Ours is the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at). In the EU you can also turn to the authority where you live or work.

Age

Accounts and the newsletter are for people aged 16 and over. If we learn that a younger person signed up, we delete the account or the subscription.

Other points

• We make no automated decisions about you.
• AI tools that help draft our text never receive visitor or account data.
• When this page changes, the date at the top changes. We e-mail account holders before larger changes take effect.