Privacy

• The addon records your own characters' play, on your own computer. It cannot send anything.
• Nothing reaches this site unless you run the uploader.
• Other players are never recorded by name, and chat is never recorded at all.
• Your character pages are visible only to you, unless you share a card or put a character on a group's board.
• One button deletes everything, at once.

Saga writes to your own computer, into the game's SavedVariables file (Saga.lua). It has no network access: World of Warcraft gives addons no way to send anything, and Saga does not try. The addon is plain Lua, so what you download is its complete source; every file the game runs can be read in AddOns\Saga, and the releases are published at github.com/saga-addon/saga.

For your own characters, it records:

• The character: name, realm, class, race, faction, ruleset (Forever), and the game's region and language.
• Sessions and time played; levels and experience; quests accepted, completed and abandoned; zones entered; rested experience; hearthstone use.
• Professions and skills, recipes learned, reputation, mounts collected, and your gold balance, sampled at most every five minutes.
• Items that dropped for you, with the creature they came from and the zone. The site prices them from the Market, so your page can show what a drop is worth.
• Your deaths: level, zone, where on the map, and what killed you: a creature, a fall, or, when another player did, only that player's class and race.
• Your gear: each time it changes, the items you wear with their item level, enchants and gems, your stats, and your specialization.
• Boss fights (kills and wipes) and Mythic+ keys: the dungeon, key level, time, whether it was in time, your score change, affixes and deaths. The other members of a key are never read.
• PvP matches: the bracket, your rating and its change, and your own damage, healing, kills and deaths. For the other players in the match, only their class, specialization, race, role and team, never a name, a character ID or any of their numbers. Your page uses this for the specs you face.
• Your own auction house listings: the item, count, price and duration.
• On Forever, auction house scans: when you open the auction house, at most once an hour, a summary per item of how many are listed and the cheapest, 25th-percentile and median prices. Never who is selling or bidding. Retail's client does not answer these scans.

/sagarec export off stops recording at any time. The full list, with exactly when and how each thing is read, is in the project's event specification.

• Other players' names, character IDs or guilds.
• Chat of any kind.
• Who you trade with, send mail to or group with.
• Anything from the combat log. On Forever, the game does not even let addons listen to it.
• Where other players are. The only positions recorded are your own deaths.

Nothing reaches this site unless you run the uploader, a separate Windows program. It reads Saga.lua, sends what is new using the upload key you connected it with, and then removes what was sent from the file, only while the game is closed. Uploads are limited to 50,000 events per account per day.

For Retail accounts it also writes one table, SagaBenchDB, into SagaCompanion.lua: the gear the top players of each specialization your characters play wear, for the in-game Vs Top tab. That table holds no player names, and nothing else in the file is changed. It keeps its settings and a log in %APPDATA%\Saga on your computer. It installs nothing by itself: when a newer version is out, it opens the download page for you.

An upload only ever adds to your own characters. Events for a character that belongs to another account (say, a character someone else already claimed) are not added to it: they are kept aside, unread, for 90 days so support can sort out who it really belongs to, then deleted.

• Your characters are visible only to you, signed in. The database enforces this for every row, not just the page.
• Groups. In a group, each member chooses which of their own characters go on the board. For those characters, the other members see a comparison row: name, race, class, faction, level, specialization, item level, timed keys and best key, boss kills, PvP ratings, quests, deaths, time played and when it was last seen. Nothing else, and never your other characters.
• Share links. If you choose Share this character, anyone with that link sees one card: the character's name, race, class and level, its best find, and four figures (on Forever: time played, quests and deaths; on Retail: best timed key, rating, item level and time played). Stop sharing closes the link at once.
• The Market, open to every signed-in player, shows Forever auction house prices per realm, built from players' scans. It never says whose scan a price came from.
• Statistics. The cohort page, for signed-in players, shows medians and percentiles across players, never a name or a character, and no statistic for a group smaller than 30. A Forever character's levelling charts compare each level with the median time players on the same ruleset took, once three different players have timed it.
• Forever in numbers. The one public page about players, /forever, shows totals across real Forever players only: a total appears once 5 different players have contributed, and each row of a breakdown (by class, zone, creature and so on) only once 3 different players are in it. No name or character appears.
• Discord. If you save a Discord webhook, your characters' milestones (round levels, timed keys, new rating highs, first boss kills, new mounts) are posted to that channel, and whoever can read the channel sees them. The webhook is write-only: once saved, not even you can read it back, only replace or remove it.
• Running the site. Saga's developer has administrative access to the database, as any site's operator does. The admin page shows only counts (sign-ups, uploads and arrivals from the addon, by week) and the ideas sent from Updates, without who sent them.

You sign in with Battle.net. When you do, this site asks Battle.net, once, for your BattleTag and Battle.net account number, and stores both with your account: the BattleTag so the header can show who is signed in, and the account number because it is also the name of your game's account folder (nothing on the site uses it yet). Only you see them. The sign-in token is used for that one request and never stored. Battle.net does not give this site your email, your password or access to your Battle.net account.

Upload keys are stored only as a hash; a key is shown to you once and never kept. Connecting the uploader with Battle.net works the same way: you approve a short code while signed in, and the uploader receives a key.

Only the ones the site needs to work: the sign-in session cookies, and saga_next, which remembers for ten minutes which page to return you to after signing in (an invite link, say). There are no analytics, advertising or tracking cookies, and no third-party trackers. One setting, whether the gear view shows its paper doll, is remembered in your browser's own storage and never sent anywhere.

Saga counts how many people arrive on Get started from a link in the addon (or CurseForge) and how many click the uploader download, as daily totals with no identifiers: a day, where the link was, and a number. No cookie, IP address or browser detail is kept with it.

• The site runs on Vercel, and the database is Supabase (PostgreSQL) in the United States. Like any host, they keep standard server logs.
• Item names and icons, class and profession icons, creature portraits and leaderboards come from Blizzard's Game Data API, cached for at most 30 days as Blizzard's terms require. The pictures load from Blizzard's servers. For a Retail character, the site asks Blizzard's public profile service for its portrait by name and realm. The World of Warcraft: Forever logo is Blizzard's, from its press kit, served from this site. All © Blizzard Entertainment; not endorsed by Blizzard.
• Against the best reads the public profiles of the top players on Blizzard's leaderboards to learn what they wear. Their names are used only while reading and never stored: what is kept is one summary per specialization.
• Hovering an item or creature shows its in-game tooltip from Wowhead. Their tooltip script loads from their servers the first time you point at or tab to such a link, and not before; their servers then see your browser's request, as with any script from another site. Nothing about your characters is sent to them: the links carry only an item or creature number.

Your characters' events are kept until you delete them. Raw auction house scans are deleted after 7 days; the prices built from them stay, holding nothing about who scanned. Events kept aside for a character you do not own are deleted after 90 days.

Sign in, open Settings, and use Delete my data. It removes, at once and for good: your characters and every event recorded for them, your share links, the groups you made and your place in others, your Discord webhook, your upload keys, the ideas and votes you sent, and your sign-in account. Market prices and public totals hold nothing about you and are recomputed without your data.

The files on your computer are yours. To remove them too, delete Saga.lua and SagaCompanion.lua from WTF\Account\<your account>\SavedVariables.