Privacy · Wanted: Dead or... Dead

Wanted: Dead or... Dead is a free fan project for WoW Forever players, run by Christopher Marsh in Florida, USA. It isn't made or endorsed by Blizzard or Discord. Questions or requests: [email protected].

In short

The addon only works inside the game. It can't reach the internet.
The desktop app uploads what the addon and the game's combat log record about world PvP, so the site can count it. Nothing else on your computer.
The site keeps no passwords and no email addresses. Signing in keeps the sign-in service's id for you and your name there.
The Discord bot never reads messages and never lists a server's members.
Anyone can hide a character's name from the site and the bot.

The addon

The addon runs inside World of Warcraft and saves its data in the game's own saved-variables file on your computer. The game gives addons no way to reach the internet. Inside the game it shares with other players running Wanted: records of kills, deaths and bounties over a hidden addon channel, the same by whisper to players on other realm names, and bounty news with Battle.net friends on the other faction who run Wanted (with a code standing in for who posted the bounty). It only posts in chat you can see when you choose to, such as calling for help.

When a kill claims a bounty it has the game save a screenshot as proof, which stays on your computer. By default it turns on the game's combat logging in the open world (off in instances), and only ever turns off logging it started itself.

The desktop app

The app is optional and runs on Windows and Mac. On your computer it reads:

the Wanted addon's saved data (and each character's, for restoring it);
the names of your character folders in the game's settings folder;
the game's newest combat log file, which grows only while combat logging is on;
screenshots taken when you make a wanted poster in the addon, to crop your character's picture from.

It writes two small helper addons into the game's AddOns folder, and keeps its own settings, logs and signing key in its own folder. If you turn on tidying, it zips old combat logs and deletes the zips after the number of days you choose. The signing key never leaves your computer: Windows keeps it encrypted to your user, a Mac keeps it in your Keychain.

It uploads to this site, signed with that key so nobody can change them or send them in your name:

the addon's records: kills, deaths, assists and bounties, with character names, the game's ids for them, zones and map positions;
deaths the combat log saw, with the same details;
what the addon knows about players it has seen: full name, class, sex and guild, and which version of Wanted they run;
your own characters' guild ranks, and the officers of their guilds, used only to prove who can connect a guild to Discord and never shown;
the name and member count of Wanted's sync channel, and its new name and password if it had to move, so everyone's addon can follow;
damage and healing between players in the combat log, per player, zone and minute, for the damage and healing boards (turn off "Share combat stats" in the app's settings to stop it; kept 30 days);
your character's picture, when you make a wanted poster;
a random id for the install and the app's version.

It updates itself from this site, checks the download's signature first, and only installs while the game is closed. It sends no crash reports or usage statistics.

The public log

Every upload is written into an append-only public log, so anyone can check that nothing was changed or quietly left out. Each entry holds the record's id (the character's name and a number), a fingerprint of its content, the app key that signed it and when it arrived. The record's content isn't in it. By design, entries can't be changed or removed, and hiding a character doesn't remove its name from past entries.

The website

Browsing needs no account. To connect the app or set up the Discord bot you sign in with Battle.net, Discord or Google. We keep that service's id for you and your name there (your BattleTag, Discord name or Google name), and nothing else from it: no email, no friends, no password. A BattleTag not refreshed by signing in for 30 days is cleared, as Blizzard's rules ask. When you use the Discord dashboard, the list of your Discord servers is held in memory for 10 minutes and never saved.

The site's operator gets a private notice with the account name when a new account signs up or an app is connected.

The Discord bot

The bot talks to Discord only through Discord's API, never through a connection that could read messages. It asks for three permissions: see channels, send messages and embed links, plus slash commands. It looks up one member at a time only to check that the person using its dashboard or /wanted setup can manage the server, and reads the server's name, icon, member count, channels and roles to show and offer them. It never posts until a server's managers pick a channel.

For each server it keeps: the server's id and name, the settings its managers choose, which Discord account changed a setting and when, the ids of the messages it posted (to update them and keep to the daily limit), and in guild mode the connected guild with the officer's account and character that proved it, and the outlaw ranks it last announced for members.

When you post a bounty from Discord, what you type in the form is held in memory for at most 30 minutes and saved only when you press Send to game. A sent request keeps your account, your Discord id, the character to post it as, the target and the amount, until it's done, discarded, cancelled or 24 hours pass. Requests are only ever shown to you and your character's addon. Who posted a bounty is never shown in Discord.

Hiding a character

Anyone signed in can hide a character by name. A hidden character has no page, no portrait and no card; the site, its feeds and the Discord bot show "Hidden player" instead, and the daily writing never names them. Their kills and deaths still count in other players' totals. Email us to undo it.

The Daily Brief and battle reports

The Daily Brief, battle reports, battle names and the trade-chat lines are written by Anthropic's Claude model from the site's public stats: zones, times, counts and the names of players and guilds as the site shows them, hidden players already hidden.

Who else is involved

Google Cloud runs the server and its database (in the eastern United States) and keeps nightly backups for 30 days.
Cloudflare sits in front of the site. Its Web Analytics counts page views on the public pages without cookies.
Anthropic writes the Daily Brief and battle reports, as above.
Discord runs the bot's messages and the Discord sign-in; Blizzard and Google run their sign-ins.

Cookies

Only the site's own, and only to make it work:

wd_session keeps you signed in, for 30 days or until you sign out.
wd_oauth protects signing in, for 10 minutes.
wd_discord protects adding the bot to a server, for 10 minutes.
tz remembers the time zone you picked at the foot of the page, for a year.

No advertising or tracking cookies.

IP addresses

Our server doesn't log the pages you visit or your IP address. When an app registers, a keyed hash of its IP address is kept to limit abuse, and rate limits are counted in memory.

How long it's kept

Stats run in seasons, and past seasons stay on the site. When WoW Forever launches, the beta's records, stats, linked characters and the Discord posts and bounty requests are deleted and a new public log starts; accounts, sign-ins, app keys, the hidden list and Discord settings are kept, so nobody has to set up again. The beta's public log stays readable. Combat stats go after 30 days, backups after 30 days.

Your choices

Play with the addon alone and nothing leaves the game.
Turn off "Share combat stats" in the app, or uninstall it.
Hide a character at Hide a character.
Remove the bot from a server: Server Settings, Integrations, Wanted, Remove.
Email [email protected] to see what we hold about you, or to have your account deleted.

If this page changes, the date at the top changes with it. See also the terms.