Privacy
PvP Logs is designed to collect the minimum account and match information needed to provide tactical review.
Information we process
When you sign in, we receive the verified email address and optional display name supplied by the identity provider. We store tracked characters, plan status, access-key metadata, usage counters and billing identifiers. We never receive or store payment-card details; Stripe processes payment information on its hosted pages.
Match evidence
Uploaded observations may include character names, realms, player identifiers, arena metadata, combat events and positional samples. Raw observations are retained to audit canonical matches, detect conflicts and reproduce merge decisions. Public character and match pages can expose in-game information contained in accepted uploads.
Security and retention
Access-key secrets are stored as one-way hashes. Raw evidence and canonical revisions are stored separately from searchable indexes. Records may be retained while needed for match integrity, abuse prevention, subscriptions, legal obligations and service recovery. A deleted account leaves a restricted pseudonymous tombstone containing its integrity identity and a deterministic one-way managed-identity hash. That hash is not anonymous and is retained only to prevent deletion and re-registration from creating a second verification vote.
Your choices
Your account includes controls to stop tracking characters, revoke keys, download an account-data export and delete the account. Deletion removes the email, display name, access keys, tracked-character links, usage records, open Checkout records and direct uploader association. Canonical public match facts and a pseudonymous integrity source may remain. Active, trialing, delinquent, paused or incomplete subscriptions and unexpired open Checkout sessions must be resolved first; canceled subscriptions, expired Checkout and customer-only billing history do not block deletion.
Service providers
The service uses OpenAI Sites and Cloudflare infrastructure for hosting and storage, an identity provider for sign-in, and Stripe for billing. Those providers process data under their own terms and privacy notices.