Privacy Policy

What we collect

• Account data — when you sign in with Battle.net (OAuth), we store your BattleTag and the World of Warcraft character names, realms, classes and specializations linked to your account. We never see or store your Battle.net password.
• Gameplay performance data — the desktop client parses your local WoW combat log and uploads Mythic+ run summaries: dungeon, keystone level, duration, per-player DPS/HPS, interrupts, deaths and damage-taken statistics, together with the character names present in the run. Combat-log chat content is never read or uploaded.
• Public game data — we also aggregate publicly available data from the Blizzard API, Raider.IO and Warcraft Logs.
• Technical data — standard server logs (IP address, user agent) used for security and rate limiting; session cookies used solely for authentication.

What we do with it

The data is used exclusively to provide the Keystone Trust features: player performance profiles, dungeon benchmarks, world statistics and group-finder listings. We do not sell personal data, we do not share it with third parties beyond the public game-data sources listed above, and we do not use it for advertising.

The desktop client

The desktop client is open source (MIT). It runs locally, reads only the WoW combat log and Keystone Trust SavedVariables files, and authenticates with a personal API key that you can revoke at any time from the website. It uploads nothing without a valid key.

Retention & your rights

Run statistics are retained to build long-term benchmark distributions. You can request access to, or deletion of, the data linked to your account at any time (GDPR). Contact us by opening an issue on GitHub or via the Keystone Trust Discord. Deleting your account removes the link between your Battle.net identity and your characters.