Privacy
ArenaPulse shows public World of Warcraft PvP data. This page says what the site stores, who else sees it, how long it is kept, and how to have it removed.
What the site stores about characters
Ladder rows, ratings, wins and losses, achievements, talents and gear come from Blizzard's public API for every character that appears on a rated ladder or that someone looks up. Rating history is kept for the current and past seasons; per-event history older than a year is rolled up into weekly points. A character name and realm can identify a person, so this data is treated as personal data even though Blizzard publishes it. The basis for holding it is legitimate interest: a public ladder is already public, and a site that makes it readable does not add to what the game shows.
Alt detection, and how to stop it
Characters are linked as alts when they share a large set of account-wide achievement timestamps. This is an inference from public data, not an account lookup, and it is the one thing here that creates new information: it ties several characters to one player. Anyone can ask for their own characters to be unlinked, whether or not they have an account, by writing to the contact address below and naming them. A signed-in account holder can also hide alt links from the account page, and the report form on any profile flags a wrong link for review.
Accounts
Accounts are not open at the moment: the whole site works without signing in, and nothing is stored about a reader. When they open, an account will store the Battle.net id and battletag, the characters claimed, favourites and likes, LFG listings, messages sent through the site, Twitch links and search history, on the basis of the account holder's own request, and deleting the account will delete all of it. This page will say so before that happens.
Cookies and local storage
Nothing is stored on the device until the reader asks for something that needs it. There is no advertising, no analytics and no third-party script of any kind. Choosing a theme, a region or a language sets theme, ap_region or ap_lang for a year. Voting on a news item sets ap_voter for 180 days, so one machine casts one vote. The browser also keeps recent searches in local storage, which never leave the device. While accounts are closed nothing else is set; when they open, signing in will add a session cookie and a form token. All of these are needed for a function the reader asked for, which is why the site shows no cookie banner: there is nothing here that consent would apply to.
Who else sees anything
News pictures are served by Wowhead's image host (wow.zamimg.com), so loading the home page or the news page tells them the reader's IP address and browser. Signing in redirects to Battle.net, which then knows about the visit. Nothing else on the site calls a third party. The server runs on Contabo hardware in Lauterbourg, France, and the database and backups stay there.
How long things are kept
Expired sessions are deleted nightly. Per-event rating history older than a year is rolled up. Database backups are kept for a few days. Everything attached to an account goes when the account is deleted; reports sent through the report form are kept while the matter they describe is open.
Rights and contact
Anyone can ask what the site holds about them, ask for it to be corrected or deleted, object to the alt linking, or ask for a copy. Write to the address below and say which characters or account the request is about. A request is answered within a month. The Spanish data protection authority (AEPD, www.aepd.es) takes complaints about how this is handled.
For any of the above, write to contact@arenapulse.es.