Last updated: August 2026

Privacy Policy

This policy explains what data Logs by HLTG collects, why, and how you can have it removed. We keep it short and plain, with no legal jargon.

Who we are

Logs by HLTG is a free, fan-made Discord bot and web dashboard for World of Warcraft guilds. It also offers Mythic Raider, an optional in-game addon plus a small companion app that imports public, top-ranked talent builds. We are not affiliated with Blizzard Entertainment or WarcraftLogs.

What data we collect

• Guild and team names: the name you provide when linking a guild with /setguild, or a raid team added with /addteam.
• Discord user ID: of the guild owner and any officers added via /addofficer. This is a numeric identifier Discord assigns; we never see your email or password.
• Discord channel and server ID: the private channel created for your guild, and the server it lives in, so we know where a guild's data belongs.
• WarcraftLogs report data: boss names, fight IDs, pull outcomes, death events, interrupts, damage taken and player character names, sourced from WarcraftLogs via their public API. This data is already public on WarcraftLogs.
• Battle.net account ID & BattleTag: only if you choose to log in with Battle.net. We receive a stable account identifier and your BattleTag (e.g. Name#1234) from Blizzard's OAuth service. We never see your Battle.net email, password, or payment details.
• Your character roster: when you log in with Battle.net we fetch and store the list of characters on your account (name, realm, class, level and region) so the site can show your characters, let you pick a main and alts, and confirm you are an officer of the guild you are editing. Delete it at any time from your profile.
• Standalone log analysis: when you use the Ephemeral Dashboard tool, we fetch the WarcraftLogs report you paste (the same boss, pull, death and player data as above) and store it temporarily so the dashboard can render. These standalone logs are automatically deleted after 48 hours.
• Linked Discord ID & username: only if you choose to connect Discord on your profile to unlock Supporter perks. We store the numeric Discord user ID and your Discord username, and we read which roles you hold in our support server so the bot can confirm the perk. We never see your Discord email or password. Unlink any time from your profile to delete it.
• Cooldown notes and raid notes: notes you write in the note tools are saved to your account so they follow you between devices. They contain whatever you type, which is usually boss strategy and character names.
• Follows and reactions: if you follow a guild's kill feed or react to a kill card, we store which guild or card it was against your account identifier.
• Aggregate counters: we keep running totals with no personal data attached, such as how many pulls have been analyzed or how many times the companion app has been downloaded. These are counts only and are not linked to you.

What we do NOT collect

• Passwords or authentication credentials
• Email addresses
• Payment or financial information (Supporter payments are handled entirely by Patreon; we only see whether you hold a role in our Discord)
• Tracking or advertising cookies, advertising profiles, or any third-party analytics product
• IP addresses in our own application logs, which record only the time, the request and the response
• Any data from the Mythic Raider addon or companion app (see below)

Our hosting and CDN providers do see the IP address of every request at the network level, as any web host must. We do not store, analyse or link those to your account.

Why we collect it

Solely to operate the service: poll your guild's WarcraftLogs reports, post pull summaries to your Discord channel, render your dashboard, save your notes, and confirm you are allowed to change a guild's settings. We do not use your data for advertising, profiling, or any purpose beyond running the service.

WoW Moments and public kill cards

When a tracked guild kills a boss, the bot creates a kill card on the public WoW Moments feed at logsbyhltg.com/moments. Please read this section carefully, because it is the one part of the service that publishes information outside your guild.

• Tracked guilds are included by default. A card carries the guild name, the boss, the pull number, the wipe percentage of the best attempt, the number of deaths, and the character names of the raid group.
• Cards include an auto-generated group photo built from the public Blizzard armory renders of the characters in that raid, and a preview image used when the card is shared as a link.
• All of it comes from public sources. The roster is read from your guild's WarcraftLogs report, which is already public on WarcraftLogs, and the renders come from Blizzard's public armory. We are presenting public data in a new place, not revealing anything private.
• Any officer can turn the feed off for their guild from the guild's Moments page. Turning it off removes that guild's cards from the public feed.
• Individual removal. If you appear on a card and would rather not, contact us using the details at the bottom of this page and we will remove the card or your character from it. You do not have to be the guild's officer to ask, and you do not have to explain why.

Cookies

We use a single functional cookie: a signed login session created when you log in with Battle.net. It keeps you signed in, lives only in your browser, and holds nothing beyond your Battle.net identifier, BattleTag and region. It is HttpOnly, expires after 30 days, and is cleared when you log out. We do not use tracking, advertising, or analytics cookies.

Local storage

We also use your browser's local storage for interface preferences, such as your Cast Timeline layout (lane order and hidden abilities) and whether you left the tools sidebar collapsed. It is purely functional, stays on your device, is never sent to our servers, and contains no personal data. Clear it any time with the Reset button or your browser settings.

Mythic Raider addon & companion app

Mythic Raider is an optional in-game addon and a small companion app you download separately. They exist only to bring public, top-ranked talent builds into the game, and they collect nothing about you:

• Companion app: it downloads talent builds from our server and writes them to a file the addon reads. It is download-only, sending us no personal data, no usage analytics, and no account information, and it needs no login.
• In-game addon: it keeps its settings and cached builds in World of Warcraft's standard local SavedVariables, on your own disk. That data never leaves your computer and is never sent to us.
• The builds themselves: they are derived from public WarcraftLogs rankings (the same public data described above) and contain no information about you.

How long we keep it

• Guild data is stored for as long as your guild is linked to the bot. When you run /unlink, all data associated with your guild (pulls, deaths, kill cards, officer list) is permanently deleted from our database.
• Your account data (BattleTag, character roster, notes, follows, reactions) is kept until you delete it. Delete all of it yourself from your profile page, at any time, with no waiting period.
• Standalone "Ephemeral Dashboard" pages are temporary: the log data and its dashboard are automatically deleted 48 hours after they are created.
• Battle.net login: your login session lasts up to 30 days or until you log out. Logging out clears it from your browser; we keep no server-side record of your session.
• Operational logs (which background jobs ran, and how long they took) are kept for 7 days and contain no personal data.
• Backups are kept for 7 days before being overwritten, so deleted data can persist in a backup for up to a week after you remove it.

Who we share it with

We do not sell, rent, or trade your data, and nobody buys advertising from us. Running the service does mean a small number of providers process data on our behalf, and one page includes assets served by others:

• WarcraftLogs: we read your guild's public reports via their API. Their privacy policy applies to data on their platform.
• Discord: the bot operates on Discord's platform, and if you link your account we use Discord's OAuth service to verify your identity (we request only your Discord ID and username, the identify scope). Their privacy policy governs Discord-side data.
• Blizzard / Battle.net: if you log in, we use Blizzard's OAuth service to verify your identity and read your character list. We also read public character appearance data to build kill-card group photos. Blizzard's privacy policy governs that exchange.
• Railway: our hosting provider. They run the server and store the database.
• Cloudflare: sits in front of the website as a CDN, and stores our off-site database backups and copies of your saved notes in Cloudflare R2 so nothing is lost if the host fails. Access is restricted to the operator.
• Sentry: when the service hits an error, a report is sent to Sentry so it can be fixed. Those reports can include the address of the page that failed and technical details of the request.
• Google Fonts: our pages load two typefaces from Google's font servers, which means Google receives the IP address of your browser when a page loads. No cookie is set and nothing else is sent.
• Wowhead and WarcraftLogs asset servers: a few pages load spell and ability icons from them, which likewise means your browser's IP reaches those servers.

Your rights

You can see what we hold about you and have it deleted, whenever you like, without asking us first:

• Download your data. Use Download my data on your profile page to get everything we hold about your account as a single file.
• Delete your account. Use Delete my account on your profile page. This erases your BattleTag, character roster, notes, follows and reactions immediately.
• Delete your guild's data. Run /unlink in Discord to delete the guild, its pulls, its deaths and its kill cards.
• Ask us. If you would rather not do it yourself, or you want a kill card removed, contact us below and we will handle it within 7 days.

If you are in the EU or UK, these are your rights of access and erasure. You also have the right to object to how we use your data and to complain to your local data protection authority.

Security

Data is stored in a private database on a server with restricted access, and backups are held in private storage. No sensitive personal data (passwords, payment info) is ever stored. That said, no internet service can guarantee absolute security.

Children

This service is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have, contact us and we will delete it immediately.

Changes to this policy

We update this page when the service changes. The "Last updated" date at the top reflects the most recent revision. If a change materially affects what we collect or who receives it, we will say so in our Discord.

Contact

Questions, deletion requests, or a kill card you want removed:

• Discord: mihai_mm08
• Email: [email protected]