Privacy Policy
Last updated: 2 August 2026
Overview
WoS Atlas is built to need as little information about you as possible. You can browse and search the site without an account. We do not sell your data or build advertising profiles, and the only analytics we use are optional and stay off until you opt in.
Accounts
An account is optional — every search, roster, leaderboard and State page works without one. An account exists only so you can save favourite players and alliances.
If you create one, we store:
- Your email address, used solely to identify the account at sign-in.
- Your password as a one-way bcrypt hash. We never store, log, or are able to read the password itself.
- The in-game player and alliance IDs you have favourited — public game identifiers, not personal data about you.
- Session records, so a sign-in can be recognised and revoked. Each one stores the IP address and browser user-agent string it was created from, alongside the account it belongs to and when it was issued.
- The IP address and browser user-agent string captured when you created the account. We keep these to investigate abuse — bulk sign-ups, credential stuffing — and to help recover an account.
Session records expire 30 days after they are issued and are deleted seven days after that. Everything else attached to an account — the email address, the password hash, the sign-up IP address and user-agent, and the saved favourites — is kept for as long as the account exists.
Signing in sets two strictly necessary first-party cookies that carry your session. They are HTTP-only (page scripts cannot read them), they are never used for analytics or cross-site tracking, and they sit outside the analytics consent banner below — without them a signed-in session cannot work at all. Signing out deletes them and revokes the session on the server.
What we do not collect
- No profiles, no real name, no link to your in-game account — an email is all.
- No advertising or ad-network trackers.
- No cookies used to follow you across other sites.
Analytics and cookies
We use Google Analytics (GA4) to understand aggregate usage of the site, such as which pages are visited. Analytics is strictly opt-in: no analytics script loads and no analytics cookies are set until you click Accept on the cookie banner.
If you accept, Google sets a small number of first-party cookies (such as _ga and _gid) that distinguish visitors and sessions. These are used only for aggregate statistics — not to identify you personally or to follow you across other websites. Before you choose, you can click Decline on the cookie banner and no analytics is loaded. If you have already accepted, you can withdraw consent at any time by clearing these cookies (or all site data) through your browser; declining on the banner also clears them and reloads the page. Analytics also never loads for automated or bot traffic, or on non-production preview builds.
Server logs
Like almost every website, the server that delivers the Atlas keeps standard, short-lived access logs — for example the requesting IP address, the page requested, and the browser's user-agent string. These logs exist only to operate and debug the service and to protect it from abuse. They are not used to build profiles or to track individuals, and they are retained only briefly before being discarded.
Data you would want removed
If you browse without an account, we hold no personal data about you at all. The game-map information shown by the Atlas is public in-game data, not personal data we hold about you.
If you have an account, the personal data we hold is your email address, your password hash, the IP address and user-agent recorded at sign-up, your saved favourites, and your session records (each with the IP address and user-agent it was created from).
Children
The Atlas is a general-audience reference tool and is not directed at children. We do not knowingly collect personal information from children, and we do not knowingly let a child create an account.
Changes
If this policy changes, the "last updated" date above will change with it. Continued use of the site after an update means you accept the revised policy.