Privacy Policy

Iceforge is run by [OPERATOR NAME], [OPERATOR ADDRESS OR COUNTRY], who is responsible for your data. It is an independent fan project, not affiliated with Blizzard Entertainment. This page explains what we collect when you use iceforge-wow.com, play on the realm or buy Iceforge Points, why, and what you can ask us to do with it. Questions or requests: email [CONTACT EMAIL].

What we collect

• Your account: your account name, and an email address if you chose to give one. We only use the email to send a password reset link when you ask for one. If a friend recruited you, we keep which account did.
• Your password never reaches us. The game turns it into a one-way verifier on your device, and we store only that.
• When the account was made, when it last logged in, and any bans on it.
• Your characters and play: your characters, their items, progress, mail, guilds and friends, your appearance collection, and any tickets you send to staff in game, as the game server keeps them.
• Chat: the game server may keep logs of chat and actions, which staff use to deal with reports, spam and cheating.
• Connections and security: each time you log in we record the time, the account and yourIP address. We use it to stop abuse (limits on sign-ups and logins, IP bans) and to investigate cheating.
• Fair play: automatic reports when a character’s movement looks like a cheat, and a record of each rated arena match with the players’ accounts and IP addresses, which staff use to catch cheating and win-trading.
• Crashes and freezes: when the game freezes or crashes, the page sends us a report so we can fix it: your browser and its version, the kind of device, your graphics card’s name, memory use and what was loading. Chrome can also send its own crash reports for the game page to us.
• Usage counts: we count things per day (page views, Play clicks, device types, connections) without addresses or IDs. For each play session we keep the time connected and the average frame rate, under a random ID that isn’t linked to your account.
• Your settings and screenshots: your game settings, key bindings, chosen addons and their saved data, and screenshots you take in game are stored on our server, so they’re there next time you play in the same browser. They’re filed under a random ID kept in a cookie (below), not under your name.

We run no analytics service and no third-party trackers: the counts above are all there is.

When you buy Iceforge Points

• Your card details never reach Iceforge. You enter them on Stripe’s page, and Stripe handles the payment.
• We send Stripe the account name you typed and the pack you chose. Stripe tells us when the payment has gone through.
• What we keep: the account name, Stripe’s session ID, the amount paid and the points bought, with the payment’s status and time.
• Logs of purchases: what each account spends points on in the game (account, character, item, price and time), and its points balance.
• Stripe keeps its own record of the payment under its own privacy policy, and we can see it in our Stripe account when we need to deal with a refund or a dispute.

Stored on your device

• Cookie wowuser (1 year): the random ID your settings and screenshots are filed under. It is set when you open the game and is needed for it to work. Staff also have a session cookie for the admin page.
• Saved logins: if you tick Remember, your account name and password are kept in your browser’s local storage, on your device only, so the game can log you in. Don’t use Remember on a shared computer.
• Small flags in local storage: auto-login, the referral code you arrived with, whether you’ve seen the app or controller tips, and short crash diagnostics used to recover after a crash.
• Service worker: the game page installs one that keeps an offline page and a font, so you see a message rather than your browser’s error when the realm can’t be reached. It keeps nothing about you.

We use no advertising or tracking cookies.

Who else is involved

• Stripe takes payments, as above.
• Cloudflare carries all traffic to iceforge-wow.com and protects it. Its Turnstile check on the game page and at password reset receives your IP address to tell people from bots.
• Resend delivers password reset emails, so it receives your email address and the message when you ask for a reset.
• Google Fonts serves a typeface used on this website, so Google receives your IP address when you open a page here.
• Your browser’s speech service, only if you use voice typing: the browser (Google’s service, in Chrome) turns your speech into text. Iceforge never receives the audio, only the text you send as chat.
• The company that hosts our server.

Some of these may process data outside your country. We don’t sell your data or show ads. We share data otherwise only if the law requires it.

Why we use it

To run the game and your account, take payments and deliver what you buy, keep the realm safe and fair, fix crashes, moderate chat, and understand how the game is used so we can improve it. We rely on our contract with you, our legitimate interest in doing those things, any legal duty to keep payment records, and your consent for optional things like giving an email address.

How long we keep it

• Your account and characters: until you ask us to delete them, or until the realm closes.
• Payment and purchase records: as long as we need them for accounting, tax and disputes, even if you delete your account.
• Login records and crash reports: only as long as we need them for security and to fix faults, then deleted. Your account itself keeps only the address of its most recent login, which is replaced each time you log in.
• Daily counts: kept as counts only, which can’t identify you.
• Moderation records: as long as needed to enforce a ban.

Your choices and rights

You can ask us for a copy of what we hold about you, to correct it, or to delete your account and its data. Email[CONTACT EMAIL] from the address on your account and tell us your account name. We may ask you to prove the account is yours. Depending on where you live, you can also complain to your data protection authority.

Children

Iceforge isn’t meant for children under 13, and players under 18 need a parent’s or guardian’s permission to play and before buying anything. If we learn that a child under 13 has an account, we’ll delete it. Parents can contact us at[CONTACT EMAIL].

Security

Passwords never leave your device, and the site is only served over HTTPS. No system is perfect, so use a password you don’t use anywhere else. Staff will never ask for your password.

Changes

If we change this policy we’ll update this page and the date at the top.