Privacy

The short version

• You can browse KwikShack and copy blueprints without an account and without signing in.
• We never see or store your Battle.net password.
• We don't store Battle.net access tokens, so we can't read your Blizzard data when you're not here.
• Character information from Blizzard is deleted within 30 days.
• We don't sell anything to anyone, and we don't run ad tracking.
• Ask us and we'll delete your account and everything attached to it.

What you give us directly

If you sign in with Battle.net

We create a KwikShack account for you. It holds a display name (taken from your BattleTag, and you can change it), and a note of whether you're an operator. That's the account itself.

If you claim a listing

We keep your claim request: which listing you claimed, any character you chose to point at, any link you offered as evidence, and anything you wrote in the note field. We also record which supporting signals were present, so a human reviewer can make a fair decision. Claim requests are kept as a record of how a listing came to be yours.

If you manage a listing

Whatever you write is stored and shown publicly: title, description, tags, how you'd like to be credited, links you add, and the blueprint code. Screenshots you upload are stored on our server and shown on your listing. We don't copy images from anywhere else.

If you submit a build

We store the blueprint code, the build details, the resolved contents, any display name you typed, and any screenshots you upload. Build submissions are currently invitation-only.

Screenshots are processed in your browser before upload — they're re-encoded, which removes ordinary camera and location metadata. Please still check an image before uploading it; anything visible in the picture stays visible.

What we get from Blizzard

When you sign in with Battle.net, Blizzard asks you what you're willing to share. You can approve part of it and decline the rest, and KwikShack works either way.

• Your Battle.net account identifier and BattleTag. The identifier is how we recognise you when you come back.
• Your World of Warcraft characters — name, realm, faction, and level — but only if you allow the profile permission. If you decline it, you still get a working account with no characters attached.

We do not see your password. Sign-in happens on Blizzard's site; we only receive the result.

We do not keep the access token. It is used during sign-in and then discarded. The practical effect is that KwikShack cannot look at your Blizzard data while you're away — and that refreshing your character list means signing in again.

We also read Blizzard's public housing decor catalog to show accurate decor names. That's game data about furniture, not about you.

Blizzard offers its own control over this: your Battle.net account settings include a Game Data and Profile Privacy option that stops third-party sites like this one from seeing your profile at all.

Public listing and source information

KwikShack indexes blueprint codes that people have shared publicly for others to use. For those listings we record the code, where we found it, a link to the original post, the creator name shown at the source, and the date we found it. This is information that was already public where we found it, and we link back rather than copying the post.

If a listing is about your work, you can claim it, correct it, or ask us to take it down — see Removing your data.

Security and moderation information

We keep a small amount of information that isn't shown publicly and exists to keep the site working and fair:

• Short-lived records tied to your network address, used to stop one source flooding the site with requests. These aren't linked to your account and aren't used to profile you.
• Review notes on curation and claim decisions, so decisions are auditable. These are never shown to visitors.
• A history of changes to a listing — when it was indexed, claimed, and edited.
• Ordinary server logs. We do not log Battle.net tokens, authorization codes, session values, or character details.

Cookies

One cookie, and only if you sign in: a session cookie that keeps you signed in. It holds a random value, not your name or your BattleTag. It's marked HttpOnly so scripts can't read it, and it expires after seven days. Signing out deletes it here and on our server.

There are no advertising cookies, no analytics cookies, and no third-party trackers.

How long we keep things

Character information from Blizzard

Deleted within 30 days, automatically. Blizzard requires this, and we agree with it.

Blizzard decor catalog data

Refreshed regularly and deleted on the same 30-day clock.

Your session

7 days, or immediately when you sign out.

Your account and display name

Until you ask us to delete it.

Listings you manage, and builds you submitted

Until you ask us to remove them.

Claim requests and listing history

Kept as a record of who manages what, and removed with your account.

Rate-limiting records

Minutes.

Removing your data

Email us and we'll act on any of these:

• Delete my account. The account, the Battle.net link, characters, sessions, and claim requests all go.
• Take down my listing. Removed from the site. You don't need to prove you own it for us to take it down.
• Stop showing my blueprint code. We stop offering it immediately.
• Correct my attribution. Tell us what's wrong and we'll fix it.
• Tell me what you hold about me. We'll send you what we have.

You can also sign out at any time from your account page, which ends the session immediately, and you can revoke KwikShack's access from your Battle.net account settings at any time.

Contact

Privacy questions, takedown requests, and corrections: privacy@postblink.wtf.

Game data shown on KwikShack is provided by Blizzard's APIs on an "as is" basis. See our legal and attribution notice.