Privacy

When you open a Warcraft Logs report, RaidKit fetches the parts of it the audits need — the fight list, the gear and buffs each player had at a boss pull, and the consumable buffs and casts during fights — and keeps a copy so the next person who opens the same report does not have to wait. This is the same data anyone can see on Warcraft Logs. Public and unlisted reports are read with RaidKit's own Warcraft Logs API access; a private report is read only through the Warcraft Logs account of the person who opened it, and is served only to people whose own Warcraft Logs account can see it. A cached report nobody has opened in ninety days is deleted by a nightly sweep; opening it again simply fetches it again.

To know a raider's race — which the combat log does not carry, and which changes the shadow-resistance numbers — RaidKit asks Blizzard's character profile API for the players in a report and keeps the answer (race, class, faction, and the level Blizzard reported) so each character is looked up at most once a week. Blizzard Entertainment is the source of this data; RaidKit is not affiliated with or endorsed by Blizzard. The data is provided as is, is never sold, licensed or passed to anyone else, and is not used for advertising. It appears only inside the audit tables.

An account holds your email address, a password hash (never the password), and the sign-in providers you connect. Connecting Warcraft Logs stores your Warcraft Logs username and the access tokens it issued, used only to read reports on your behalf; disconnecting deletes them. The site also remembers which reports you opened, so you have a list of your recent nights — that list is yours alone and is never shown to anyone else. Deleting your account from Settings removes all of this.

A message sent through the contact form is stored so it can be answered; your address is used only to reply. The site sets a session cookie when you sign in and a preference cookie for your theme; there is no advertising, no tracking pixel, and no third-party analytics script. Page views are counted in aggregate without identifying who viewed them.

To have a character's cached profile, a report's cached data, or anything else removed, or to ask what is held about you, use the contact form. One person reads it.