Privacy Policy
1. Controller
Gil Hermann, Pankstraße 58, 13357 Berlin, Germany, email: jakeey.exe+wow@gmail.com
2. Server log files
When you visit this site, the web server processes technically necessary data (IP address, date/time, requested page, browser information). This serves the secure and stable operation of the site (Art. 6(1)(f) GDPR). The hosting provider deletes these logs after a short time.
3. Registration and user account
If you create an account, I store: username, password (only as a secure hash, never in plain text), optionally your email address, creation date, your play money (copper/silver/gold), rank, streak, purchased items, and per video the watch time and reward received. The purpose is to run the reward system and the leaderboard (Art. 6(1)(b) GDPR). Your username and your gold appear publicly on the leaderboard. Please do not choose a name that identifies you.
The data is stored until you have your account deleted. An email to the address above is enough.
Login via secret code, password, Twitch or Google
Secret code: You can create an account without any email. We only store your display name and a non-reversible check value (HMAC) of your code – never the code itself. Password: stored only as a secure hash. Twitch / Google (optional): If you use this login or link an account, the provider only gives us an ID number of your account and (for Twitch) your display name. We do not request any further permissions. Legal basis: Art. 6(1)(b) GDPR. You can disconnect linked accounts in your profile at any time.
Abuse prevention
To prevent spam and code guessing, we briefly count login and action attempts. We only store a non-reversible hash of IP address or account and action, which is overwritten after one hour at the latest (Art. 6(1)(f) GDPR).
Browser storage
Without an account, the site stores your recipe progress and dungeon checklists in your browser's local storage (localStorage). This data never leaves your device and only serves the function you requested (§ 25(2) TDDDG). You can delete it in your browser settings.
Fonts
All fonts are loaded from our own server. There is no connection to Google Fonts.
4. Cookies
The site sets only one technically necessary session cookie (wfh_sess) that keeps you logged in and protects forms against abuse, and one cookie wfh_lang that remembers your language choice (§ 25(2) TDDDG). There are no advertising or tracking cookies and no analytics tools.
5. YouTube
Videos are only embedded after you click “Load video” (enhanced privacy mode, youtube-nocookie.com). Only then does your browser connect to YouTube/Google and data such as your IP address is transmitted. The legal basis is your consent by clicking (Art. 6(1)(a) GDPR). Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy information: policies.google.com/privacy.
Preview images: Your browser loads video thumbnails directly from YouTube servers (i.ytimg.com). Your IP address is transmitted to Google, even without clicking a video (Art. 6(1)(f) GDPR, interest in an appealing presentation).
6. Streamer page and external links
On the streamer page, profile pictures may be loaded from external servers. For the LIVE indicator, the server (not your browser) queries the Twitch API; no data about you is transmitted. Links to YouTube, Twitch, Kick, TikTok, Discord or the official World of Warcraft website leave this site. From the click on, their privacy policies apply.
Twitch live streams: On the streamer page streams are only loaded after you click “Allow Twitch streams” (player.twitch.tv). Only then does your browser connect to Twitch Interactive, Inc., USA, and data such as your IP address is transmitted; Twitch may set cookies. Legal basis is your consent (Art. 6(1)(a) GDPR). Your decision is stored only locally in your browser and can be withdrawn by deleting site data. In support mode several streams load at once.
Local storage: Settings such as cooking skill, recipe progress, view (cards/table) and stream settings are stored only in your browser’s local storage; they are not sent to us.
7. Recipients and hosting
The site runs with a hosting provider in the EU acting as a processor under Art. 28 GDPR. Your data is not passed on to other third parties, except to the services named above after your action.
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and to withdraw consent with effect for the future. Write to the email address above. You can also complain to a supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.
Last updated: October 2026.