Privacy

For anything on this page, write to contact@pastways.net.

• The character you look up. The region, realm and name you enter are sent from Pastways' server to Blizzard's API to fetch that character's public profile and achievements. They also form the page address, like /us/frostmourne/arthas.
• Blizzard's data about that character. What Blizzard returns is cached so the next reader does not have to fetch it again. It is stored under the character, never under you, and kept for at most 24 hours, well inside the 30-day limit Pastways holds itself to.
• Your IP address. Every website receives it. Pastways uses it for two things: counting requests, so that one visitor cannot overload the site, and the Cross Pastways count below. Each request count lasts sixty seconds and is not linked to anything else.
• Server logs. Pastways' host, Cloudflare, records requests (the address requested, the time, and technical details such as the response) so faults can be diagnosed. They are kept for up to seven days, then deleted, and are not used to follow anyone.
• Who people compare with. When you use Cross Pastways, the second character counts towards the list of most-compared characters. To count different visitors rather than visits, Pastways keeps one row for each character and visitor: the character, the day, and a code made from your IP address, that character, and a secret that is replaced every month. The code is pseudonymous rather than anonymous. It is not your address, and because it is different for every character, one visitor's rows cannot be linked just by matching their codes. But anyone holding the secret could take a given address and test it against the stored rows, for any character. Pastways never does. A daily job deletes rows older than 30 days, and each month's secret is deleted when the month ends. A character is only listed once at least 100 different visitors have compared with them.
• Shares, counted. Links from the Share buttons carry a small “shared” mark. When a visit arrives through one, or an app such as Discord or WhatsApp fetches a link's preview, Pastways adds one to a daily total for that app. Only the totals are kept: no address, cookie or character, and nothing about who shared or opened the link.

Searching your own timeline happens in your browser. What you type there is not sent anywhere.

• No accounts, sign-ins or profiles.
• No analytics that identify or follow anyone, no tracking pixels and no fingerprinting.
• No record of which characters you looked up, or when, beyond the Cross Pastways count above, which keeps no list of yours. (Your own browser keeps a short list, for the search's suggestions; Pastways never sees it. The cookie page has the details.)
• No advertising, and nothing about you is sold or shared for marketing.

• Cloudflare hosts Pastways, delivers its pages and protects it from attacks. Your requests pass through Cloudflare's network.
• Blizzard Entertainment is where the character data comes from, and Pastways shows it to you as is. Pastways never asks for your Battle.net login or password. Pastways' server asks Blizzard for the data; your browser does not. Achievement icons and character portraits, though, load directly from Blizzard's image servers, which see that request as any image host would.
• YouTube, only if you follow a link to a cinematic. Nothing from YouTube is embedded in Pastways.
• Ko-fi, only if you follow the “Support Pastways” link. A tip is made on Ko-fi's own site, under Ko-fi's privacy policy; Pastways never sees your payment details, and nothing from Ko-fi is embedded in Pastways.

Fonts are served by Pastways itself, not by a font service.

Under data-protection law such as the GDPR, the handling above rests on legitimate interests: running the site, keeping it available and protecting it and Blizzard's API from abuse. Nothing requires your consent, because nothing is used for anything else.

Pastways shows only what Blizzard publishes about a character. To stop that, turn off Share my game data with community developers, under Game Data and Profile Privacy in your Blizzard privacy settings. Blizzard then stops returning it, and any copy Pastways holds expires within 24 hours.

You may ask for access to, correction or deletion of personal data about you, or object to how it is handled, at contact@pastways.net. You may also complain to your local data-protection authority.

Pastways sets one cookie, and only if you ask for the timeline newest first. Your browser also keeps your recent lookups for the search's suggestions, on your device only. The cookie page has the details of both.

If what Pastways does with data changes, this page changes first, and the date at the top says when.