Privacy policy

Who we are

This site, warincwiz.com, is operated by Wicked Sick Ltd. We are the data controller for personal data collected through this site.

Contact: [email protected].

What we collect and why

• Account details (email, name, password hash). Used to provide your account and saved lineups. Legal basis: contract.
• OAuth profile data from Google or Discord if you sign in that way (your email and display name). Legal basis: contract.
• Discord account link, only if you connect Discord. We store your Discord user ID and username, optionally your in-game name, and whether you are a member of our Discord server. The membership answer is obtained from Discord and refreshed once a day for accounts that have connected; it exists so your clan can rally you and so we do not invite you to a server you already joined. You can remove all of it at any time with Disconnect on your security settings page. Legal basis: contract (clan features) and legitimate interest (not sending you invitations you do not need).
• Uploaded screenshots and lineup data. Used to extract heroes from your screenshots and save your lineups. Imported screenshots and the hero crops cut from them may also be retained to check and improve our hero-recognition model. Legal basis: contract (extraction) and legitimate interest (model improvement).
• IP address and basic request metadata. Used for rate-limiting, anti-abuse, and security logs. Legal basis: legitimate interest.
• Session and CSRF cookies. Strictly necessary for the site to work. Legal basis: strict necessity.
• Newsletter email, only if you submit our newsletter popup. Stored by Mailchimp. Legal basis: consent.

Third parties we share data with

• Cloudflare (CDN, security). Receives request metadata for every page load.
• Mailchimp (Intuit Inc., USA — newsletter platform). Only loads after you accept marketing cookies. Receives your IP, page URL, and any email you submit through the popup. Operates under the EU–US Data Privacy Framework.
• Google (OAuth login). Only if you choose that sign-in option.
• Discord (Discord Netherlands B.V.). If you sign in with Discord, or connect it to an existing account. Beyond sign-in we also ask Discord, about once a day, whether connected accounts are members of our server, and we may grant such members a role there. Stops entirely when you disconnect.
• Our infrastructure provider (Laravel Forge) and transactional email provider (Postmark / Resend / SES) for system emails.

How long we keep data

• Account data: until you ask us to delete it.
• Imported screenshots and hero crops kept for recognition model improvement: retained until no longer needed for that purpose.
• Public lineup share-cards: indefinitely (they're part of the public site).
• Security and request logs: 30 days.
• Newsletter subscriptions: until you unsubscribe (handled by Mailchimp).

Your rights

Under GDPR and UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Have it corrected if it's wrong.
• Have it deleted ("right to be forgotten").
• Receive a copy in a portable format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time (this doesn't affect processing already done).
• lodge a complaint with your local data-protection authority (in the UK, the ICO).

Email [email protected] to exercise any of these.

Cookies

See the cookie policy for a full list of cookies set by the site.

You can change your cookie preferences at any time via the "Cookie settings" link in the page footer.

Children

This site is intended for users aged 16 and over. We don't knowingly collect data from anyone younger. If you believe we have, please contact us and we'll delete it.