Privacy Policy

1. Summary

WWM Map is a free, community-built companion website for the game Where Winds Meet. We keep data collection to the minimum required to run the service: an optional account you create yourself, the community content you choose to submit, and a short-lived bot-protection token.

We do not sell personal data, and we do not run advertising profiles.

2. Data we process

Data	Why	Retention
In-game player ID & auto generated password	To let you sign in to map sync and to attribute the content you post	Until you ask us to delete it
Map markers, comments, images and reactions you submit	To display community content to other visitors	Until you delete it or request removal
IP address and a Turnstile verification token	Bot and abuse protection (see section 3)	IP address is not stored; the token lives in your browser cookie for up to 30 minutes
Anonymous client-side error reports	To detect and fix crashes (message, file, line and page URL only)	Aggregated, deduplicated by fingerprint

3. Cloudflare Turnstile (bot protection)

This site is protected by Cloudflare Turnstile, a privacy-preserving alternative to CAPTCHA. Turnstile runs an invisible challenge in your browser to confirm that a request comes from a real user rather than an automated script.

What Turnstile collects

• Your IP address, which Cloudflare uses to run the challenge and which we use to bind your verification token to your connection.
• Browser and device signals (user agent, screen and rendering characteristics) used by Cloudflare's risk model.
• A telemetry/attestation token which is validated against Cloudflare's servers.

Cloudflare states that Turnstile does not use this information for advertising, does not build a cross-site profile of you, and does not set cookies for advertising purposes.

How we use it

When you pass the challenge we issue a signed token that is bound to your IP address and stored in an HttpOnly cookie (wwm_ts). The token expires 30 minutes after it is issued; once it expires the challenge runs again automatically on your next request. The token is stateless: we do not keep a copy of it or of your IP address in our database, we only verify its signature, its expiry time and the IP it is bound to.

Cloudflare's own privacy notice

Turnstile is operated by Cloudflare, Inc. Their handling of the data collected by the challenge is described in the Cloudflare Turnstile Privacy Policy and in the Cloudflare Privacy Policy .

Turnstile is governed by the Cloudflare Turnstile Terms of Service, which require us to disclose this use and to give you access to the Cloudflare privacy documentation linked above.

4. Cookies & local storage

• wwm_ts — HttpOnly, Secure, SameSite=Lax. Holds the Turnstile verification token described above. Expires 30 minutes after it is issued.
• WWMSession — HttpOnly. Only set when you sign in. Holds your session.
• client_lang — your chosen interface language.
• Local storage / IndexedDB — your map progress, filter settings and locally saved credentials stay in your browser and are never sent to us unless you use a feature that requires it.

5. Third parties

• Cloudflare — hosting, CDN, Turnstile bot protection and analytics.
• Google Analytics / Google Tag Manager — anonymous usage statistics (page views). No account data is sent.
• Discord — optional: only if you choose to link your Discord account for sync permissions.
• YouTube / video providers — embedded player only where a community member posts a video guide.

6. Your rights

You can view and delete the markers and comments you created from within the site. To request a copy or the deletion of everything linked to your account, contact the team on our Discord server. If you are in the EEA, UK or another jurisdiction with data protection laws, you also have the right to object to processing and to lodge a complaint with your local supervisory authority.

7. Security & changes

All traffic to this site is served over HTTPS. Passwords are stored in our own database and are never shared with third parties. We may update this policy from time to time; material changes will be reflected in the "last updated" date above.

Questions? Reach us on the WWM Map Discord server.