Privacy

WoW Forever Codex is a fan-made reference run by one person, not a company, and I am the one responsible for what happens to your data here. It is not affiliated with Blizzard Entertainment. If you have a question about anything on this page, or want to use any of the rights below, you can message me on Reddit.

There is no sign-up, no contact form and no newsletter, and nothing is stored on your device unless you ask for it or allow it. To send you a page at all, the site’s host, Vercel, receives what every browser sends with every request: your IP address, the page you asked for, the site you came from and your browser’s name. Vercel keeps that in short-lived server logs, to run the site and keep it safe from attacks. (GDPR Art. 6(1)(f): running the site you asked for)

Apart from Google’s ad script (see Adverts below), everything on the page comes from this site’s own address. Item, spell and talent icons belong to Wowhead, and instance artwork to Warcraft Wiki, but the site fetches both on your behalf, so those sites see Vercel’s servers and never you. The font is served from here too.

When you first arrive, you are asked whether I may count how the site is used. In Europe, Google’s consent window asks, together with the question about ads; everywhere else, or when an ad blocker hides Google’s window, a small box at the bottom of the page asks. Until you answer yes, nothing below happens: neither tool is even loaded.

If you allow it, Vercel Web Analytics counts your visit: the page you opened, the site you came from, your country, and which browser, operating system and kind of device you are on. And PostHog, on its EU servers in Frankfurt, records how the site is used once you are on it: which pages you open and in what order, which links and buttons you click, how long a page stays open, and how quickly it loads.

Neither sets a cookie or stores anything on your device. Each links one visit’s page views together with a code it works out on its own server, and that code changes every day, so the same person tomorrow is a new number. Your events go to this site’s own address and Vercel passes them on, so your browser never contacts PostHog itself. PostHog sees your IP address on the way in, uses it for your country and the daily code, and does not keep it.

That tells me which dungeons people actually look up and whether the talent calculator gets used. It cannot tell me who you are, and it cannot follow you to any other site. (your consent: §25(1) TDDDG and GDPR Art. 6(1)(a))

You can change your answer at any time, right here on this page, which every page links to at its foot. Taking a yes back stops both tools from the next page on. It does not undo what was counted before, but nothing in that points back to you.

The site carries adverts from Google AdSense, which help pay for hosting. To show them, and to show its consent window, every page loads Google’s ad script from Google’s servers. That sends Google your IP address and the address of the page, and Google uses them to check for fraud as well. (GDPR Art. 6(1)(f): paying for the site, and asking for your consent at all)

In the EEA, the UK and Switzerland, Google’s consent window asks before anything else happens: whether Google and the ad partners it lists may store and read information on your device, for example in cookies, and use it to choose and measure adverts. If you say no, Google may still show adverts, chosen without cookies and without anything about you beyond the page you are on. (your consent: §25(1) TDDDG and GDPR Art. 6(1)(a))

You can change your answer at any time with the button in the Analytics section above. Google decides for itself what it does with what it receives, under its own privacy policy: how Google uses information from sites that use its services. Google LLC is based in the United States and is certified under the EU-U.S. Data Privacy Framework. Outside Europe, Google applies the rules of the place you are in.

A few things are saved in your own browser, each one because you did something that needs it. They stay on your device, they are never sent anywhere, and I cannot read them. (§25(2) no. 2 TDDDG: needed for what you asked for)

• Your answer to the analytics question, so it is not asked again. If Google's consent window asked you, Google keeps your answers in a cookie on this site for the same reason.
• The class and level you picked in the levelling companion, and the faction you picked.
• Which quests and library books you have ticked off.
• The last five things you opened from the search.
• Where you were in a dungeon run, until you close the tab.
• Which beta changes you have already looked at, once you have opened them, so the green bubbles only mark what is new to you.

Clearing your browser data for this site removes all of it. Nothing breaks if you do.

A few blog posts show a YouTube video. Until you press play it is only a picture saved on this site, and nothing is loaded from YouTube. Pressing play loads the player from youtube-nocookie.com, which sends your IP address to Google, as the line on the picture says. What happens then is up to Google. (your consent, given by pressing play: GDPR Art. 6(1)(a))

When a page breaks on the server, the site sends PostHog a note of the error and the page’s address, without its search terms. It carries nothing about who opened the page, and nothing is read from your device for it. (GDPR Art. 6(1)(f): keeping the site working)

• Vercel Inc. hosts the site and runs the visit counter. It is based in the United States, so some data may be handled there, under the EU’s standard contractual clauses in Vercel’s data processing agreement.
• PostHog keeps analytics and error reports on its servers in Frankfurt, under its data processing agreement.
• Google receives your IP address and the page’s address on every page through its ad script, and more only if you allow it in its consent window or play a video. It is based in the United States and certified under the EU-U.S. Data Privacy Framework.
• Cloudflare handles the domain’s DNS, so your DNS provider asks Cloudflare where the site lives.

Links out to Reddit, Imgur and the sources listed in the footer are ordinary links. Those sites only hear from you if you click one. Nothing here is sold, and nothing is used to make decisions about you.

Vercel’s server logs are kept for a short time and then deleted on their own. The analytics figures stay with Vercel and PostHog for as long as their plans keep them, and are deleted after that. Your answer to the analytics question and the other things your browser remembers stay until you clear them.

Under the GDPR you can ask what personal data is held about you (Art. 15), have it corrected (Art. 16) or deleted (Art. 17), have its use restricted (Art. 18), get a copy to take elsewhere (Art. 20), and object to uses that rest on my legitimate interests (Art. 21). A consent you gave can be taken back at any time, for the future (Art. 7(3)), with the buttons in the Analytics section on this page.

In practice there is little for me to show you: the visit counts arrive already added up, and PostHog’s records carry only a code that changes every day, so I could not find your visit among them even if you asked me to. The server logs sit with Vercel rather than with me.

You can also complain to a data protection authority, for example the one where you live (Art. 77).

Visit counting was added on 23 September 2026, and PostHog on 7 October 2026. Since 11 October 2026 both run only after you allow them, icons come through this site instead of from Wowhead, and the site no longer stores a note of your first visit. Google AdSense, with its consent window, was added the same day. If anything else changes, I will say so here.