Datenschutzbestimmungen

• No player data. The site lists servers and their player counts. It never collects player names, Steam IDs or who played where.
• No cookies from this site unless you sign in with Discord, add a live status message to a Discord channel or pick a language, and no advertising or cross-site tracking at all.
• Visits are counted without your IP address. Do Not Track or Global Privacy Control stops the site's own counts, and you can turn off Cloudflare Web Analytics below.
• Signing in keeps scrambled IDs and what you choose to save (ratings, claims, favourites, filters, Battleplans, API keys), never your name, avatar or email, and you can delete it all yourself.
• Messages you send through the site's forms keep your email only if you add one, and then for 30 days.
• Nothing is sold or shared for marketing. The only other companies involved are the ones that run the site, listed below.

The WARDOGS Server List is an unofficial fan site run by one person, @inch, who is responsible for the data described here. It is not run by or affiliated with BULKHEAD, the makers of WARDOGS. For any privacy question or request, use the contact form and pick Privacy or my data, or email help@wardogserverlist.com.

The site is hosted on Cloudflare. Like any web host, Cloudflare receives your IP address and browser details with every request, to deliver the page and protect the site from attacks. On top of that:

• Rate limits. To stop one visitor or program overloading the site, requests are counted per IP address (for IPv6, per connection block) over a few seconds to a minute. These counters live in Cloudflare's memory and are not stored by the site.
• Error logs. Cloudflare keeps the site's programs' request logs for up to 7 days to find faults. They may include the address and browser details Cloudflare saw. They are only read to fix problems.

The site does this on the basis of its legitimate interest in keeping a free service running and secure.

Cloudflare Web Analytics

Pages load Cloudflare Web Analytics, which counts page views and page speed without cookies and without following you across sites. Cloudflare's own privacy policy covers it. You can turn it off for this browser below.

The site's own counts

The site also counts page views, banner loads and API calls itself, to see what is used. Each count records:

• the page or API address without any search values (for a server page or banner, which server, or the join code a banner was asked for), the language a page was shown in, the response status, and for a banner its style;
• your country, the website that linked you here, and whether the request came from a desktop, a phone or a bot;
• for API calls only, also the network it came from (your internet provider's name and number), the Cloudflare data centre that answered, the name and contact website a program gives in its User-Agent, how the call asked for a server (by key, code or ID, never the value), and the short ID of the API key it was made with, if any (never the key).

Your IP address, full browser details, cookies and search values are never recorded. If your browser sends Do Not Track or Global Privacy Control, nothing is counted at all. Cloudflare keeps the counts for 3 months.

Some things are saved in your browser's own storage, never sent to the site (favourites and saved filters aside, when you are signed in), so pages remember your settings and redraw quickly. You can clear them any time by clearing this site's data in your browser.

• Favourites, and a few details about each so they can be shown while a server is offline. To draw their charts, the page asks the site for those servers' history, which sends the servers' keys, nothing about you. When you are signed in they are also saved with your account (below); changes not saved there yet wait in your browser, beside a short part of the scrambled ID of the account it last matched.
• Saved filters (My filters on the server list): a name and the list's filters for each, and which one opens the list. When you are signed in they are also saved with your account, beside a short part of the scrambled ID of the account they last matched.
• Display choices: row density, the gold bar chart's scale and period, the size of your favourites table, how far the tab bar was scrolled, the ratings notice dismissed, and your analytics choice.
• An unsaved claim form: the description and links you were typing for a claimed server, kept for 30 minutes if you had to sign in again, so they aren't lost.
• Copies of pages you saw (the list, statistics, status), reused for up to 15 minutes, or 6 hours for the status page, so a reload doesn't flicker.

A language you pick in the header is kept in a cookie for a year, holding only that language's code. Unlike the things above, your browser sends it with each visit, so the site can open its pages in that language.

Signing in is only needed to rate a community, claim a server you run, keep your favourites and saved filters on every device, make a Battleplan, or make an API key. Discord shares your account and the list of Discord servers you are in. The site uses them once, then revokes the sign-in.

What is kept

• A scrambled ID for your account, the date your Discord account was created, and when you last signed in.
• For each device you are signed in on (up to 10), a random session number and when that sign-in began and ends, so signing out really ends it. Nothing about the device itself is kept.
• Scrambled IDs of your Discord servers, used to tell a community's own members and members of other communities apart from other raters, so scores stay fair.
• Which of those Discord servers you own or manage, as scrambled IDs too, so a Discord link you set on a claimed server is accepted, and your website and description show on a community's page, only when you run that community's Discord.
• Your ratings (stars and the reasons you picked, with when you gave them) and the servers you claimed, with the description, website and Discord link you set for them.
• Your favourites (up to 50 servers) with the few details your browser keeps about each (name, region, map, size), so your other devices show the same list. Only you see them.
• Your saved filters (up to 12): the name you gave each, the list's filters and which one opens the list. Only you see them.
• Your API keys (up to 5): the name and the optional contact you gave each, the sites a browser key is for, when it was made and which version of the terms you accepted, its first 8 characters and a fingerprint of the key (a SHA-256 hash), never the key itself. Only you and the person who runs the site see them; the contact is there so we can reach you if a program using the key misbehaves.
• Your Battleplans (up to 10): a name, a time, a group size and the list's filters, under a 6-letter code. Anyone you give the code to can see them, on the site and through the Discord bot, but nothing about who made them. A one-off Battleplan is deleted a day after its time.
• While a claim code you were shown is being looked for (up to 3 days): the server, the code and when it was last checked.
• A record of changes on claimed servers: the description, website and Discord link set, when, and the scrambled ID that set them, so a hijacked server page can be put right.
• A record of refused saves: a description or website our checks turned down (links, abusive words, blocked websites), what they found, when, and the scrambled ID that tried. Kept 30 days.
• If an account is stopped from claiming servers for breaking the rules for server pages, its scrambled ID, when, and a note on why, so it can't claim again. Deleting your data doesn't remove this; email to ask about it.

The scrambled IDs can't be turned back into names. Your name, avatar, email and messages are never kept. The site receives your Discord username during sign-in and discards it.

What other people see

Only totals: a community's score once it has 10 ratings, and reasons picked by at least two people. A claimed server shows its description, its links and how many owners it has, never who they are.

Cookies

Signing in sets a session cookie holding your scrambled ID and that sign-in's session number (30 days), and a second one that only says you are signed in, so the header can show Account (30 days). During sign-in a short-lived security cookie (10 minutes) guards against forged requests.

How long, and how to delete it

Ratings, claims, saved favourites, filters, weekly Battleplans and API keys are kept until you remove them. A sign-in that never rated, claimed or saved a favourite, filter, Battleplan or API key is deleted by itself 30 days after it was used. On your account page you can sign out (or, signed in on more than one device, sign out on every device), remove a rating, give up a claim, revoke an API key, or press Delete my ratings, claims and sign-in to delete them all, the favourites, filters, Battleplans and API keys saved with your account included (each browser keeps its own copy of favourites and filters until you clear it). Taking a star off a server removes it from your account straight away. The record of link changes is kept to protect server owners; email to have your entries removed from it. Refused saves stay until their 30 days are up, and a server you shared with other owners keeps the scrambled ID that last changed its links.

The site keeps this because you asked to sign in, and to keep scores fair (its legitimate interest).

The feedback form (the Feedback button on every page, and the contact page) sends:

• what you write, and the topic you pick;
• the page you sent it from (its address), the section of the page that was on screen when you opened the form (the form shows it, and you can take it out), and on a server page, that server's name and key;
• your email, only if you add one.

Messages are read only by the person who runs the site. Your email is deleted 30 days after you send the message, and is used only to answer it. Answers come from help@wardogserverlist.com and are sent through Cloudflare; a copy of each answer is kept with your message. The message itself is kept, with its answers and without your email, until it is deleted by hand once dealt with. To limit abuse, messages from your network are counted for a day (as a scrambled value, never the address), and that count is deleted after 2 days.

Opening a form (on the contact page it is already open) also runs a check, provided by Cloudflare in your browser, that a person rather than a program is sending it. It runs in a frame from Cloudflare, under Cloudflare's notice for this check. Cloudflare sees your browser and connection details for that check, and when you send, the site passes it your IP address to confirm the check; the site learns only whether it passed, and keeps nothing from it.

The site keeps this to answer you and fix what you report (its legitimate interest), and your email because you chose to give it.

If you add a server's live status to a Discord channel, Discord gives the site a webhook for that one channel, without any details of who you are. The site keeps the server watched, the Discord server, channel and message it posts to, and the webhook's secret, encrypted. Starting the setup sets a short-lived security cookie (10 minutes) that guards against forged requests. A setup from your network is counted for a day (as a scrambled value, never the address) to limit abuse, and that count is deleted after 2 days.

Remove it from the link you got when you set it up and the site deletes its record at once. If you delete the webhook or the message in Discord instead, the site notices the next time it tries to update the message and deletes its record then. It is also deleted if the server is gone for 7 days.

When you run one of the Discord bot's commands, Discord sends the site the command with the details it always includes: your Discord ID, and the Discord server or chat you ran it in. The site uses your Discord ID only to limit how many commands one person can run in a minute, in a counter that lives in Cloudflare's memory and is not stored. Nothing else about you, the Discord server or the chat is kept, and the bot can't read messages.

For /battleplan, as you type the code, your Discord ID is turned into the same scrambled ID the site keeps when you sign in, only to suggest the Battleplans you made; it is not stored. The Battleplan it posts shows its name, time, group size and filters, and nothing about who made it or who ran the command.

Each use is counted with the site's other counts (kept 3 months): which command it was, whether it worked, and whether the bot was added to a Discord server or to someone's own apps. No Discord IDs of any kind are in those counts. What a command shows is the same public server data as the site. The site does this on the basis of its legitimate interest in running the bot and seeing what is used.

Some Discord servers give a role only to people who run a WARDOGS server. If you pick that role, Discord sends you to verify.wardogserverlist.com, where you choose what Discord gets and sign in with Discord. The site then tells Discord how many servers you have claimed here and since when, and with your agreement their names too, which Discord shows on your profile next to the connection. Discord decides whether you get the role.

The site keeps the same scrambled ID it keeps when you sign in, what you agreed to and when, and a Discord sign-in key, encrypted, so the role changes by itself when you claim or give up a server. It can only update that one connection: it can't post as you or read your messages or servers. Your Discord ID, name and avatar are not kept. The site does this because you agreed to it.

Stop any time: sign in on that page again and press Stop sharing, use Delete my ratings, claims and sign-in on your account page, or remove the app under Discord's Settings, Authorized Apps. A link with no verified servers for 30 days is deleted.

The site reads the game's public server list every 5 minutes: each server's name, join code, region, map, mode, settings, banner picture address and player count. It keeps each server's 5-minute history for 30 days. Game-wide totals, hourly and daily figures by region and by server, weekly and season summaries, and a register of the server names and IDs it has seen are kept for good. No player names, Steam IDs or anything about individual players is collected.

Server names are shown as their owners set them in-game. If a name or a claimed link shows something it shouldn't, get in touch.

Fonts and every other file are served by the site itself. Cloudflare and Discord may handle data outside your country, including in the United States, under their own safeguards.

Cloudflare Web Analytics in this browser

Turning it off stops it from the next page you open. It is remembered in this browser only.

Everything else

• Send Do Not Track or Global Privacy Control from your browser to stop the site's own counts.
• Delete your sign-in, ratings and claims from your account page.
• Depending on where you live (for example under the UK or EU GDPR), you can ask to see, correct or delete data about you, or object to how it is used. Use the contact form or email help@wardogserverlist.com. Most of what the site keeps can't be linked to you, so say which ratings, claims, Discord channel or message your request is about (for a message, roughly when you sent it and from which page).
• You can also complain to your local data protection authority.

The site is not meant for children under 13, and Discord sign-in requires a Discord account, which has its own age limits.

Changes

If this policy changes, this page is updated and the date at the top changes with it. Bigger changes are noted in the changelog.