Privacy Policy

This policy guides the categories, purposes, retention periods, and user rights regarding personal information processed during the use of the WoWNaetoi service.

1. Personal Information Controller and Scope of Application

와우내또이 운영자complies with relevant laws and regulations such as the Personal Information Protection Act of the Republic of Korea, and this policy applies to the wowndde.huzy.net and web services provided under related sub-paths.와우내또이 web service.
  • Service Name: 와우내또이
  • Personal Information Controller: 와우내또이 운영자
  • Privacy Inquiries: 서비스 내 공지 또는 운영자가 고지한 문의 채널
  • Effective Date: 2026년 6월 26일

2. Categories of Personal Information Processed

The service processes the following information to the extent necessary for member features, community, search history, external account linkage, and operation log provisions.
  • Sign-up and Login: Login ID, nickname, password hash, member identifier, permissions, account status, registration date, modification date, last login timestamp
  • Social Login and Account Linkage: Provider type, provider account identifier, display name, OAuth access token, refresh token, token expiration timestamp
  • Battle.net Account Linkage: Battle.net account identifier, display name, BattleTag or profile display information, linkage token, token expiration timestamp
  • My Character and Logs: Character name, realm, region, namespace, class, level, and identification information required to view recent reports and combat logs
  • Community and User Input: Posts, comments, uploaded images, WeakAuras descriptions, party/raid schedules, raid planner, watchlists, search history
  • Automatically Generated Information: IP address, access timestamp, requested URL, page URL, referrer, browser/device information, cookie or local storage identifier, error and usage logs
  • Advertising and Analytics Tool Information: Cookies generated by third-party tools such as Google Analytics and Google AdSense, advertising identifiers, visit and ad interaction information

3. Method of Personal Information Collection

  • Collected directly from users when they use features such as signing up, logging in, writing posts, searching, and linking accounts, or generated automatically.
  • Necessary information may be provided during external service integration processes such as Google, Naver, Kakao, Battle.net OAuth authentication, Blizzard API, and Warcraft Logs API.
  • Access logs and usage logs may be recorded on servers for service security, troubleshooting, prevention of excessive requests, and statistical analysis.

4. Purpose of Personal Information Processing

  • Member identification, maintaining logins, account management, and prevention of fraudulent use
  • Providing service features such as characters, guilds, auction house, logs, PvP, raid planner, and community
  • Battle.net account linking, character lookup, external API data retrieval, and cache management
  • Providing search history, recently viewed items, and personalized screen layouts
  • Managing user-generated content such as posts, comments, schedules, and watchlists
  • Error analysis, security monitoring, limiting excessive requests, and improving service quality
  • Serving advertisements, analyzing visit statistics, and analyzing service usage status
  • Fulfilling statutory obligations and responding to disputes

5. Retention and Use Period of Personal Information

Personal information is destroyed without undue delay once the processing purpose is achieved. However, if necessary for service operation, dispute response, prevention of fraudulent use, or compliance with relevant laws, it may be retained for the periods specified below.
  • Member Account Information: Until membership withdrawal or account deletion request
  • Login Session: Up to 30 days from creation or until logout/expiration
  • Social and Battle.net Linkage Information: Until unlinking or membership withdrawal
  • Public Content such as Posts, Comments, Raid Planner, WeakAuras: Until deletion request or as long as necessary for service operations
  • Search History and Watchlist: Until deleted by the user or upon membership withdrawal
  • Access and Usage Logs: Until a reasonable period necessary for security, troubleshooting, and statistical purposes
  • Data stipulated by relevant laws such as the Act on Consumer Protection in Electronic Commerce, Protection of Communications Secrets Act, etc.: Until the retention period specified by the respective laws expires

6. Provision of Personal Information to Third Parties

As a rule, the service does not provide users' personal information to third parties. However, if a user connects an external account or uses an external API-based feature, necessary request information may be transmitted to the external service to provide that feature.
  • Blizzard Entertainment: Battle.net authentication, retrieval of game data such as characters, guilds, auction house, and PvP
  • Warcraft Logs: Retrieval of log data such as reports, characters, guilds, and combat logs
  • Google: Google login, Google Analytics, Google AdSense, and ad-related features
  • Naver, Kakao: Authentication processing when using their respective social login features
May be provided in accordance with relevant laws if there is a legal basis or a request from investigative agencies and other lawfully authorized bodies.

7. Outsourcing of Personal Information Processing and Potential Overseas Transfer

Infrastructure or third-party services such as clouds, databases, CDNs, advertising, analytics, OAuth authentication, and external API providers may be used to operate the service. In this process, access logs, cookies, device information, and authentication request information may be processed on overseas servers.

8. Use of Cookies and Similar Technologies

The service may use cookies, local storage, session storage, and similar technologies to maintain logins, save user settings, and analyze advertisements and visits. Users may refuse or delete cookie storage through browser settings, but doing so may limit certain features such as maintaining logins, character lookups, and recent searches.

9. Procedures and Methods for Destruction of Personal Information

  • Personal information in electronic file formats is deleted using methods that make recovery difficult or processed into an unidentifiable form.
  • Information stored in databases is deleted or anonymized according to operational policies after achieving its purpose, expiration of the retention period, or processing a deletion request.
  • Backup data may be deleted after a certain period according to backup cycles and recovery policies.

10. User Rights and How to Exercise Them

Users may request access, correction, deletion, suspension of processing, withdrawal of consent, or unlinking of their account regarding their personal data. Requests can be made through the features provided after logging in or via personal data inquiry channels, and the operator will process them in accordance with relevant laws after verifying the user's identity.

11. Measures for Personal Data Protection

  • Passwords are stored using one-way hashing.
  • Connected account tokens are encrypted and stored when possible.
  • Administrator functions and important APIs are operated to be accessed after permission verification.
  • Security and stability measures are applied, such as excessive request limits, access log recording, and error log checking.

12. Personal Data of Children Under 14

The service does not target children under 14 years of age. If we discover that personal data of a child under 14 has been collected, we will delete it or take necessary measures without delay.

13. Changes to the Privacy Policy

This policy may be revised according to changes in laws, service features, or processing items. If there are important changes, the effective date and the contents of the changes will be announced through the service screen or notices.