MEMBER PRIVACY

Your account data.

This private area stores the Discord user ID approved by an admin, your access role, character profile, availability, event sign-ups, and Raid Soft Reserve selections. It does not request a website username, password or email address. On older installations, legacy usernames/password hashes may remain in the database until the site owner performs the optional cleanup.

Who can see it?

Signed-in active members can see character profiles and event rosters. Raid leaders manage events and attendance. Admins manage access; Devs can manage privileged accounts and view administrative audit entries. Guild leadership uses this information to provide membership access and organise events.

Session cookie

veni_session is a necessary, first-party cookie used for sign-in and CSRF protection. It is HttpOnly, SameSite=Lax and Secure on HTTPS. The browser cookie lasts for the browser session; server access expires after two hours idle or twelve hours total. It is not an analytics or advertising cookie.

Discord

Discord sign-in requests only the identify scope. We use the returned Discord user ID to match an account approved by an admin. OAuth access tokens are used temporarily and are not stored in the database. Discord applies its own privacy policy.

Wowhead loot tooltips

When a member opens the raid loot modal, a tooltip script and item icons may be requested from Wowhead/ZAM external servers. The browser connects directly to those servers and their privacy terms apply. Raid loot is cached only from verified Wowhead Forever sources and is not manually entered. Your Discord ID is not sent to Wowhead.

Retention & requests

Account data and sign-ups remain until guild leadership removes them. Access throttling uses keyed hashes and 15-minute windows; expired entries are periodically removed. Audit entries record account and event administration, never OAuth tokens. Contact guild leadership on Discord to request access, correction or deletion. Hosting logs are controlled separately by the website operator.