1. Controller and contact
The controller is the maintainer of wow-anniversary.fi.
For privacy or site-content questions, contact: ota-yhteytta@wow-anniversary.fi.
2. What data may be processed?
The site's content pages are static. The optional WoW Trivia account and multiplayer features also process data needed to provide the service:
- Technical logs: the web host or server may record details such as IP address, timestamp, requested URL, browser user agent, referring page and error-log information.
- Email contact: if you send email, we process the email address, message content and technical metadata needed to handle and reply to the message.
- Cookies, consent, analytics and advertising: CookiePal, Google Analytics 4, Google tag and Google AdSense may process details such as cookie and consent information, IP address, device and browser data, page views, referrer and usage events on the site.
- WoW Trivia account: email address, player name, one-way password hash, protected email-verification and session identifiers, account status and timestamps.
- Trivia and Party mode: server-validated results, difficulty, completion time, answer outcomes, weekly ranking, lobby player name and protected identifiers needed for game progress and reconnection. Passwords, session keys and recovery keys are not stored in plain text.
- Community question submissions: the proposed question, answer choices, explanation, source, review status, possible moderator note and identifiers of the submitting and reviewing accounts.
- Abuse prevention: a short-lived network identifier created with the service's secret key and request counts. Trivia does not store the IP address itself in its application database for this purpose.
3. Why is the data used?
Data is used to operate the site, create and protect accounts, verify email addresses, provide games and Party lobbies, compile the weekly leaderboard, review community questions, investigate errors, prevent abuse, respond to contact messages, manage cookie consent, measure site usage and display advertisements.
4. Legal basis
Trivia account, game and Party data requested by the user is processed to provide the requested service. Security logs, abuse prevention and community moderation are based on the maintainer's legitimate interest in keeping the service safe and trustworthy. Contact messages are processed based on the legitimate interest to respond. Analytics, advertising and related non-essential identifiers are processed based on the visitor's consent where consent is required.
5. Cookies, analytics and external services
The site uses CookiePal to manage cookie and consent choices. CookiePal is loaded from cdn.cookiepal.io so that visitors can accept, reject or change their consent choices.
The site uses Google Analytics 4 and Google tag to measure site usage. Tracking includes page views, navigation, news-card and source-link clicks, scroll depth and article-audio progress.
The site uses Google AdSense to display advertisements. AdSense may load resources related to Google advertising services, for example from googlesyndication.com, googletagmanager.com, google.com or doubleclick.net domains. Ad personalization and advertising storage depend on the visitor’s consent choices.
The site’s CSS, JavaScript and icon styles are normally served locally from wow-anniversary.fi asset files.
6. Disclosures and processors
Data is not sold. Trivia account and game data is stored in the site's MariaDB database at the hosting provider. Data may be processed by the hosting provider, email provider, CookiePal and Google services to the extent required for site operation, security, email delivery, consent management, analytics, advertising and replying to contact messages. Some providers may process data outside the EU/EEA according to their own terms and applicable safeguards.
7. Retention
A Trivia account is kept until the user deletes it or the maintainer removes it for a justified reason. Login sessions last no more than 30 days. Email verification codes expire after 15 minutes and expired identifiers are removed by maintenance. Lobbies, individual game runs and weekly scores are removed by the next weekly cleanup. Question submissions and moderation records are kept only while editorial review and reasonable abuse investigation require them; when an account is deleted, personal data is removed or detached from editorial material that must be retained. Private database backups are retained for 14 days by default. Contact email and server logs are kept only while the matter, site operation or security requires them.
8. Your rights
You can review and correct your basic account details and delete your Trivia account from the account view. Depending on the situation, you may also have the right to request access, restriction or objection. You can exercise these rights by contacting ota-yhteytta@wow-anniversary.fi.
If you believe your personal data has been processed unlawfully, you may also contact the Finnish Data Protection Ombudsman.
9. Security
The service uses HTTPS, limited access rights, strongly protected passwords and tokens, server-validated scoring, request limits, private backups and maintained hosting. No online service can be completely risk-free.
10. Changes to this policy
This policy is updated if the site’s service providers, cookie practices, analytics, advertising, community features, user accounts, forms or other functions affecting personal-data processing change.