Privacy
& Trust

The Covenant

Foreverbound is a fan-made keepsake for World of Warcraft: Forever— a private place to bind your screenshots, moments, and milestones into a lasting book. It is a personal project, not a company harvesting you for profit. We ask for only what a keepsake genuinely needs, and we treat it the way we’d want our own memories treated.

This policy covers everything at foreverbound.co. By creating a Chronicle you agree to it. If a line ever troubles you, the Keeper’s address is at the foot of this page — use it.

What We Gather

We collect only these things, and only when you give them to us:

• Your email address — to verify your account, let you sign in and reset a password, and send account-related messages. We do not send marketing.
• Your username — chosen by you, checked against a profanity/abuse filter. It may be shown publicly on shared memories.
• Your password — never stored as you typed it. We keep only a salted PBKDF2-SHA256 hash (100,000 iterations). Even we cannot read your password.
• Battle.net identity (only if you connect it) — your BattleTag and your character roster: character names, race, class, faction, and level. We pull this from Blizzard’s official API and never see your Blizzard password.
• Your memories — the screenshots you upload plus the details you add: title, description, date, zone, and a “quality” you assign. These are private to your account unless you choose to share one.
• Feedback you send — the message text, and your email/username if attached, so the Keeper can reply.
• Basic technical logs — our host records ordinary request data (IP address, timestamp, browser type) as part of serving and protecting the site. We do not build profiles from it.

We do not gather your real name, address, phone number, payment details, or precise location. Foreverbound has no ads and no payment.

Why We Keep It

• To create and secure your account, and to verify it’s really you.
• To store and display your memory books, to you.
• To import and show your WoW characters, if you connect Battle.net.
• To keep the site safe — screening uploads and preventing abuse.
• To answer feedback and support requests.
• To send strictly necessary account emails (verification, password reset).

That is the whole list. We do not sell your data. We do not trade it. We do not use it to train advertising models. There is no back room.

How It Is Warded

• The entire site is served over encrypted HTTPS.
• Passwords are salted and hashed (PBKDF2-SHA256, 100k iterations) — never stored in plain text.
• Sign-in tokens are stored hashed, never in the raw. Your session lives in a single HttpOnly, Secure, SameSite=Lax cookie that scripts can’t read.
• Your uploaded photos are stored in per-account namespaced storage — the serving layer refuses to hand one person another’s images.
• Password-reset and email-verification links are single-use and expire quickly.

No system is beyond all harm, and we can’t promise perfection — but we hold to real, current practice, not theater.

The Allies We Trust

Foreverbound relies on a small circle of trusted service providers to run. Each sees only the sliver of data it needs to do its part:

We do not share your data with anyone beyond these providers, except where the law compels us, or to protect the safety of people using the site.

The Warding of Uploads

To keep Foreverbound safe for everyone, every image you upload is scanned automatically for explicit content before it is stored. An upload that fails this check is rejected and never saved.

We keep a moderation record of these automated decisions (the verdict and the flagged categories) as a safety and audit measure. Uploads are also limited per account per day to prevent abuse. If you ever choose to share a memory publicly in future, additional review may apply.

Your Rights & Rites

Your Chronicle is yours. You may, at any time, from your Settings:

• See and edit your identity, username, and email.
• Download everything — export all of your photos across every character in one archive.
• Disconnect Battle.net and sign out everywhere.
• Delete your account — which erases your photos from storage and your memories, characters, connected accounts, and login from our database.

Depending on where you live (for example under GDPR in Europe or the CCPA/CPRA in California), you may also have the right to access, correct, port, or demand deletion of your data, and to object to certain processing. To exercise any of these, write to the Keeper (below) and we will honor it.

Note: when you delete your account, safety moderation records of past automated upload decisions may be retained in de-associated form, and expired security tokens (which are already inert) are cleared over time.

How Long It Endures

We keep your account data for as long as your Chronicle exists. Delete your account and your photos and memories are purged. Sign-in sessions expire on their own after 30 days. Verification and reset links expire within hours. We don’t hoard data we no longer need.

One honest caveat: Foreverbound is in beta until the launch of WoW Forever. As stated in our beta notice, data may be reset before full launch — which is exactly why we let you download everything at any time.

The Young

Foreverbound is not intended for anyone under 13 years of age, and we do not knowingly collect data from them. If you believe a child has created a Chronicle, write to the Keeper and we will remove it.

What We Do Not Do

Some of the most important promises are about absence:

• No advertising, ever.
• No analytics platforms, no marketing pixels, no third-party trackers.
• No selling or renting of your data.
• No cross-site profiling. The only cookie we set is the one that keeps you signed in.

Amendments

As Foreverbound grows, this covenant may be revised. When we make a meaningful change, we’ll update the date at the top and, for anything significant, tell you plainly. Continuing to use the site after a change means you accept the revised terms.