The tools work without signing in. This page explains which data is processed when you use Forever Hub, for what purpose, on which legal basis, and what rights you have.
This is an English translation provided for convenience. Only the German version is legally binding.
Loading …
Last updated: 2 November 2026
The controller for data processing on this website within the meaning of Art. 4(7) GDPR is:
Daniel Albert - Software Solutions
c/o IP-Management #47718
Ludwig-Erhard-Str. 18
20459 Hamburg
Privacy requests: [email protected]
No data protection officer has been appointed, as there is no legal obligation to do so. For questions about data protection, please use the email address above.
When you access the website, the server infrastructure processes technically necessary connection data, in particular your IP address, the time, the requested address (URL) and HTTP status code, and the headers sent by your browser (referrer, browser type and operating system). This serves to deliver the website and to keep it secure. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a working and secure operation. Without this connection data the website cannot be accessed at all.
Hosting: The website and its database are not run by an external hosting provider but on the operator's own server in Germany (processing location: Germany; administered by the operator). No processor is therefore involved in the hosting. The server is not directly reachable from the internet; the connection is routed through a Cloudflare tunnel (see below).
Server logs: The web server (nginx) and the application containers log the connection data listed above. These access logs are subject to a regular limit of 14 days; this is an operational decision, not a statutory period. In case of a specific security incident, the necessary extracts may be kept separately until the investigation is complete. The logs are not combined with other data. Cloudflare's logs are not covered by this.
The connection is encrypted end to end with TLS (HTTPS).
All traffic of this website passes through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (CDN, DNS and tunnel to the server). Cloudflare processes, among other things, your IP address, the requested URLs, timestamps, browser data and technical security information in order to deliver the website and to protect it from attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable delivery of the website without exposing our own server directly to the internet.
Processing outside the EU, in particular in the USA, is possible. Cloudflare is certified under the EU-US Data Privacy Framework; in addition, the Cloudflare Data Processing Addendum provides standard contractual clauses for such transfers (Art. 45, 46 GDPR). Depending on the protection features enabled, Cloudflare may set its own security cookies such as __cf_bm or cf_clearance; these are distinct from our sign-in cookies (section 4). Further information: Cloudflare privacy policy · Cloudflare cookies.
We ourselves only use technically necessary cookies. Under § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) they do not require consent because they are strictly necessary for a service you explicitly requested; no cookie banner is needed for them. We do not set analytics cookies. Advertising cookies and similar identifiers from Google are only used if advertising is enabled and you have consented in the consent dialog (section 9).
locale – stores the language (German or English) when you change it with the language switcher. Lifetime 1 year.better-auth., or __Secure-better-auth. over HTTPS) – keep you signed in after the Discord sign-in and protect the sign-in process. They are only set when you sign in; lifetime up to 7 days after last use or until you sign out.Some tools keep your input in your browser's local storage (localStorage) so it is still there on your next visit: auction house prices entered in the profession calculator and your progress in the legacy planner. This data never leaves your device and is not sent to us. You can delete it at any time in your browser settings. The legal basis is also § 25(2) no. 2 TDDDG.
Shared talent builds are stored only in the address (URL), not on our side. Anyone who receives the full link can read the build, so do not put personal information in it.
Fonts, our own scripts and artworks are served from our own server; there is no connection to Google Fonts or other font providers. The only exception is Google's advertising script on pages with an ad placement, if advertising is active (section 9).
Signing in is optional and only needed for the raid planner. You sign in through Discord (Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA). You are redirected to Discord and confirm the authorization there; Discord processes the sign-in data as an independent controller. Discord then sends us:
We also store the access keys (tokens) Discord issues for the sign-in. We do not use them to access any further data of your Discord account or to act on your behalf. We do not receive your password, friends list or messages. The email address is not displayed and not used for newsletters or advertising.
For the signed-in session we store the IP address and user agent you signed in with, so that misuse can be detected. This session data is deleted when you sign out and expires 7 days after last use at the latest.
The legal basis is Art. 6(1)(b) GDPR (providing the account you requested), and for the session data additionally Art. 6(1)(f) GDPR (protection against misuse). Processing by Discord itself is governed by Discord's privacy policy. Discord also processes data in the USA.
In the raid planner we store the data you enter yourself:
Who can see it: Public events are visible to all visitors and can be indexed by search engines and copied by third parties. The event page shows your display name as organizer and your signed-up characters with class, role, status and note. "Unlisted" events do not appear in the overview but can be opened by anyone with the link. The webhook address is never shown publicly. Please do not enter personal or confidential information in titles, descriptions and notes.
The legal basis is Art. 6(1)(b) GDPR: showing the sign-ups to the organizer and the other participants is the purpose of the raid planner.
You can edit or delete characters at any time under My account; deleting a character also removes its sign-ups.
The calendar export (ICS file) of an event is generated when you download it; nothing about you is stored.
Webhooks: If an organizer enters a Discord webhook address when creating an event, we send an announcement to that Discord channel: title, description, start time, region, ruleset, instance, group size and the link to the event.
Bot: The Forever Hub bot can show events on Discord servers that invited it and keep them up to date. Besides the event data, these messages contain the organizer's display name and the names of the signed-up characters per role and on the waitlist. The bot only reads data of public events or events requested by their ID and does not process Discord messages.
Recipients are Discord Inc. (USA) and all members of the respective Discord channel. The legal basis is Art. 6(1)(b) GDPR (announcement requested by the organizer) or Art. 6(1)(f) GDPR (the group's legitimate interest in organizing itself on Discord). Events that ended more than 6 hours ago are no longer updated; messages already posted on Discord cannot be recalled by us.
We do not load class, talent and item icons from our own server but from wow.zamimg.com, the content delivery network of the game database Wowhead. When you open a page with icons, your browser connects directly to that server. This technically and necessarily transmits your IP address, the requested image file, browser information (user agent) and – if your browser sends it – our domain as the origin (referrer) to the operator of the server. The operator and its service providers may be located outside the EU (in particular in the USA). We have no influence on further processing there; we do not transmit any other data, and we do not set any cookies for that server.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a consistent, fast-loading display of the game icons. You can object to this processing (section 12) or block external images with a content blocker in your browser; the site remains usable without icons.
Other external websites (e.g. Discord invites, linked sources) are only contacted when you open a link. The privacy information of the respective provider then applies.
To cover server and operating costs, advertisements via Google AdSense may be shown on individual content pages of this website (e.g. guides, rankings, calculators and database). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), for users in the European Economic Area, Switzerland and the United Kingdom. You can tell whether advertising is currently active by the "Privacy settings" link in the footer: it only appears when advertising is switched on. If it is missing, no Google code is loaded and none of the processing described in this section takes place.
What happens when advertising is active: When you open a page with an ad placement, your browser loads Google's advertising script (pagead2.googlesyndication.com) and connects directly to Google servers (including googlesyndication.com, doubleclick.net, adtrafficquality.google, google.com). This processes your IP address, the page requested, browser and device information and – depending on your consent – cookies and similar identifiers. Google uses this data to select and deliver ads, measure impressions and clicks, detect invalid clicks and fraud, and for billing. Pages where you sign in or enter data (sign-in, my account, creating and editing events) as well as the legal notice and the privacy policy contain no ad placements.
Consent: Before advertising cookies are set or similar identifiers are read, a Google consent dialog ("Privacy & messaging", based on the IAB Europe Transparency & Consent Framework, TCF 2.2) asks for your permission. There you can accept, decline or select individual purposes and vendors. The legal basis for storing information on your device and accessing it is your consent under § 25(1) TDDDG; for the subsequent processing of personal data it is Art. 6(1)(a) GDPR. Google stores your decision in a cookie or in your browser's local storage (including FCCDCF, FCNEC) so the dialog does not appear on every visit; Google's advertising cookies are named e.g. __gads, __gpi, __eoi and IDE.
Personalised and non-personalised ads: If you consent, Google may personalise ads based on your interests and previous activity and use cookies and advertising IDs for this, also across devices. If you decline, Google only shows non-personalised ads; they are based on the content of the page and your approximate location (from the IP address) and may use cookies only for fraud prevention, frequency capping and measurement. Google is an independent controller for ad delivery; the advertising partners listed in the dialog only receive data to the extent of your consent.
Withdrawal: You can withdraw or change your consent at any time with effect for the future – via the "Privacy settings" link in the footer, which reopens the dialog. You can also turn off personalised advertising in your Google ad settings and delete or block cookies in your browser.
Transfers to third countries: Google may also process data on servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework; in addition, Google uses standard contractual clauses (Art. 45, 46 GDPR). Further information: Google privacy policy · How Google uses information from sites that use its services · Advertising at Google · Types of cookies used by Google.
If you contact us by email, we process your message and sender details to handle your request. The legal basis is Art. 6(1)(f) GDPR (our interest in answering); for requests concerning your account, Art. 6(1)(b) GDPR.
General enquiries are deleted once they have been dealt with and no follow-up questions are to be expected, at the latest 30 days after completion. Messages that must be retained by law or are required for specific legal claims are kept separately and only for that purpose.
When an email is sent, the sender, recipient, message content and technical metadata are also processed by the email providers involved; we cannot guarantee that this processing takes place exclusively in Germany.
Deleting your account: You can delete your account yourself at any time under My account → “Delete account”. This immediately deletes the account, the Discord link, all sessions, your characters, your signups and the events you created. Alternatively, send an email to [email protected] – ideally from the address stored with Discord or stating your Discord display name, so we can identify the account; we then delete it without undue delay, within one month at the latest, and confirm the deletion.
Independently of this, you can remove the connection in Discord under Settings → Authorized Apps. Your Discord account itself is not affected by a deletion on our side.
Subject to the statutory requirements, you have the following rights regarding your personal data:
To exercise them, simply contact [email protected].
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement. An overview of the German supervisory authorities helps with the choice.
You are not obliged to provide us with any data. Without the Discord sign-in you only cannot use the raid planner; all other areas remain available. No automated decision-making including profiling (Art. 22 GDPR) takes place, and we ourselves do not create user profiles; the calculators only process your input. For interest-based ad selection by Google, which only happens after your consent, see section 9.
We update this privacy policy when the website or the legal situation changes. The version published here applies.