The short version
We store the minimum needed to run the site: who you are on Discord, what you choose to publish, the private conversations that applications require, and the Justice reports you file. The only advertising is one sponsor banner on the front page, which helps cover the site’s server costs, and the banners of guilds that support the site with a supporter pass. There is no ad network behind either, we do not sell or share data with advertisers, the sponsor or the guilds, and we do not track you across other sites.
What we get from Discord
When you log in, Discord gives us your user ID, username, display name and avatar. With the community’s bot we also check whether you are a member of the Forever Community Discord server and which roles you hold there, because that decides what you can do here. We store the time of your last login and the time of your last role check.
We never see your password, your email address, your friends list or your private messages on Discord.
What you add
Anything you type into the site: profile fields, guild page content, events, applications and the messages in them, reports and blocks. Your timezone and availability are stored so that schedules can be shown in your own time.
A rough timestamp of your last activity is kept on your profile so that guilds can see whether a player is active. It records that you were here, not what you looked at.
If you add a profile picture, we keep the image on this site and show it wherever your player profile is shown, including your profile’s post in the Discord player forums. We remove location and camera details from photos when you upload them. Remove it on your profile page and it is deleted. Moderators can remove a picture that breaks the community guidelines. Your Discord avatar is never shown on your public profile or card.
If you report another player through Justice, we keep your report: who you reported, what you wrote, the evidence links you sent, and that you sent it. Only you and the team see it; the player you report never sees your name. If a ruling is made about one of your characters, we keep the case and its ruling, and you can read it and appeal once. A place on the blocklist is shown to logged-in members of the Discord (character name, what happened, the ruling and its dates, never evidence or reporters). The same details are also published every week inside the Forever Justice addon, which anyone can download from CurseForge or this site, so a place on the blocklist should be treated as public. An overturned ruling or an expired place on the blocklist no longer appears on the list.
If you take part in a community giveaway, each try is recorded against your account, right or wrong, so that retries can be limited. If you enter, we also record the entry: your account, the guild you were in and your rank there when you entered, when you entered, whether you were drawn, and, if the team rules an entry out, that it did, who did it and why. Only the team sees these records; if you win, your guild’s name may be shown as the winner.
If you connect your Battle.net account on your account page, we keep its account number and your BattleTag, and nothing else: never your Blizzard password, your email address or any Blizzard login token. Only you can see your BattleTag; it is not shown on your profile or anywhere public. Disconnect it on the same page and we delete both.
If you bring characters in from Battle.net, we read your WoW: Forever character list once, keep the characters you choose, and refresh their level, class and guild from Blizzard’s public armory. The list you choose from is kept for an hour and then deleted. The characters you keep show an “Armory verified” tick on your profile (your alts follow your choice of who sees them). Disconnect Battle.net and they are no longer kept as verified.
If a Guild Master links their guild to Blizzard’s armory, the names, classes and levels of the characters in that guild’s armory roster are added to or refreshed on the guild’s roster here, and shown wherever that roster is shown.
If you list your alts on your characters page, we keep each one’s name, class, level, role, professions and the guild you say it is in. You choose who sees them: everyone who can see your profile, or only the recruiting teams of guilds you apply to. When you bring alts on an application, the guild keeps a copy of them as they were when you applied. If the guild accepts you, those alts also join its roster, shown wherever the guild’s roster is shown, and stay there until the guild removes them or its roster is next brought in from the game without them. Delete an alt on your characters page and it is gone from your profile at once, but not from an application already sent or a roster it has joined.
When a guild brings its roster in from the ForeverGuild+ addon, the professions and skill levels of the characters on that roster come with it, and the guild page shows how many crafters it has in each. Their names are shown only where the guild’s roster is shown.
When you are logged in and open a stream on our Streams pages while it is live, we note which channel and on which day, for the streaming achievements. Only the first visit each day is kept, never how long you watched, and it is not shown to anyone.
Email notices
Email is optional and off unless you turn it on. On your notifications page (Account, then Notifications) you can add an email address and tick the notices you want by email: guild applications (a guild accepting or declining yours, or a new application to a guild you recruit for) and messages about an application. Nothing is ticked until you tick it. We use the address for those notices and nothing else: no marketing, no newsletters, no promotions, and it is never shown to anyone, shared or sold.
What we keep: the address, whether you have confirmed it, the boxes you ticked, and for each email we send, what kind it was, its subject and short text (who did what, such as a name and a guild, never anyone’s message), which page it links to, when, and whether it was delivered. We first send one email with a link to confirm the address is yours; nothing else goes to it until you do, and the link stops working after 24 hours. The emails never contain the text of anyone’s message, only who wrote and a link to read it here. Every email has a link that stops that kind of email at once, without logging in.
If the mail service tells us an address bounces or has marked our email as spam, or our emails to it fail three times in a row, we stop using it and say so on your notifications page. If an admin switches email off, anything waiting to be sent is dropped. The emails are sent through Cloudflare’s email service, which handles the address only to deliver them.
To stop: untick the boxes, or press “Remove my email”, which deletes the address at once along with anything waiting to be sent. Deleting your account deletes it too. The record of emails already sent (without the address) is deleted after 30 days.
Push notices
Push notifications are optional and per device. On your notifications page you can press “Turn on notifications on this device”; only then does your browser ask whether to allow them, and nothing is ever asked when a page loads. They cover the same two things as email, guild applications and messages about an application, with a tick box each. Turning push on for your first device ticks both for push (it does not touch email); untick either whenever you like.
What we keep for each device: the address your browser’s push service gave it (Google, Mozilla, Apple or Microsoft, depending on the browser), the two keys your browser made so that only it can read what we send, a plain name such as “Chrome on Windows” (worked out from your browser, which itself is not kept), when it was added and when it was last sent something. For each notice we keep what kind it was, its short text and whether it was delivered. A notice says who did what and links here; it never contains the text of anyone’s message. It is encrypted for your device, so the push service carries it without being able to read it.
To stop: press “Turn off on this device”, press Remove next to any device in the list, block notifications for this site in your browser, or log out on that device (logging out removes it, as long as the browser runs the site’s scripts; on a shared computer, turn it off first to be sure). Removing a device deletes it and anything waiting for it at once. If a push service tells us a device no longer exists we delete it ourselves. Deleting your account deletes them all. The record of notices already sent is deleted after 30 days.
What is public
When the Guild Spotlight auction is on, the names of bidding guilds and their bid amounts are shown publicly; who in the guild placed a bid is visible only to staff. A guild banned from the auction sees why on its own dashboard; nobody else is told the reason.
Published guild pages, visible player profiles (with their profile picture, if you add one), news and events are public to anyone on the internet, including search engines. That includes a guild’s public Discord link when the guild chooses to add one; its members-only invite is never public. You control profile visibility from your profile settings and can hide your profile at any time; a hidden profile stays reachable only by moderators.
Posts from the Discord player forums
Posts players write directly in the player forums of the Forever Community Discord server are shown publicly on the site at /players/discord: the title, the text, the tags, the author’s Discord display name and avatar, and when it was posted. Attachments are not copied, only counted. The site checks the forums every five minutes and removes a post within minutes of it being deleted on Discord, so nothing is kept after you delete it there.
To keep your post on Discord but off the site, react ❌ to your own post; it disappears from the site at the next check and comes back if you remove the reaction. A ❌ from anyone else does nothing. Moderators can also hide a post from the site. When a guild replies to your post through the site, the reply is posted in your Discord thread by the site’s bot, signed with the guild and the character who wrote it, and listed under your post on the site.
What is private
Application threads are visible only to the applicant and the guild’s recruiting team. Recruiters’ private notes are visible only to that team. Notifications, saved guilds, blocks and the reports you file are visible only to you.
Moderators can view reported content and, when a report concerns an application message, that message. They cannot read application threads that nobody has reported.
Cookies and browser storage
We set one session cookie so the site knows who you are, a short-lived cookie during Discord login to prevent login forgery, and one that remembers that a Discord role check failed so we do not hammer Discord retrying it. All three are essential and none of them tracks you. Three more are cosmetic and optional: fw_palette remembers the colour theme you picked, fw_wallpaper the background picture, and fw_season whether you switched the seasonal decorations off; each holds one word and nothing about you. The compare feature keeps your selected guilds in your own browser’s local storage; that list never leaves your device.
Who else is involved
The site runs on Cloudflare’s network, which processes requests on our behalf and keeps standard operational logs. Discord provides login and membership checks. Fonts are loaded from Google Fonts. Wowhead’s tooltip script is loaded from wow.zamimg.com so that links into its World of Warcraft: Forever database show the item, spell or quest when you hover over them; it fetches those previews from Wowhead. A featured guild may show a YouTube recruitment trailer: its still image is loaded from YouTube (i.ytimg.com) with the page, and the video player is loaded from youtube-nocookie.com only if you press play. Stripe and PayPal handle supporter passes and tips, on their own pages, only when you choose to pay. None of these receive your site content from us beyond what is needed to deliver the page.
The sponsor banner on the front page is an image stored and served by this site, so showing it tells the sponsor nothing about you. It is a plain link: the sponsor learns of a visit only if you click it, and the browser is told not to say which page you came from. The site counts nothing about the banner.
The Supporter banners on the front page show the banner of a guild that supports the site with a supporter pass. It works the same way: an image stored and served by this site, and a plain link to the guild’s page here, so showing or clicking it tells nobody anything about you and nothing is counted.
If your guild buys a supporter pass, or you leave a tip, you pay on Stripe’s or PayPal’s own checkout page, never on this site: your card or PayPal details never reach us. Stripe or PayPal tells this site that the payment went through. For a pass we keep the guild, the level, the length, the amount, the dates, which of the two it was paid with and their reference numbers for it, and which member of the guild started the checkout; a tip is not recorded here at all. For a Guild Spotlight win we keep the guild, the amount, which of the two it was paid with and their reference numbers, any refund, and which member of the guild paid. None of it is public: staff see it, and the guild sees its own passes on its dashboard. Memberships taken on Buy Me a Coffee before passes existed run until they end: for those, Buy Me a Coffee tells this site the supporter name, email address, membership level, dates and note, and we keep the name, the level, the dates and a one-way hash of the email, never the email itself or the rest of the note. The Thank-you page (/supporters) lists the guilds that support the site and the level they support at, never the people: no names, emails or amounts, and a guild can hide itself from it on its dashboard.
Retention and deletion
Sessions expire after fourteen days. Read notifications are removed periodically. Everything else stays until you delete it or ask us to.
Your profile picture is deleted when you remove or replace it, and when your account is deleted.
Your email address, if you added one, is deleted when you press “Remove my email” and when your account is deleted.
The devices you turned push notifications on for are deleted when you turn them off or remove them, when the push service says they are gone, and when your account is deleted.
To delete your account and your content, ask a Recruitment Manager on Discord. We will remove or anonymise what we can, keeping only what is needed to stop a banned account from coming back.
Changes and contact
When this page changes, the date at the top changes with it. Questions about your data go to the Recruitment Managers on the Forever Community Discord server.