Mastercraft

Privacy policy

Last updated 14 November 2026

We keep as little about you as we can, we never sell it, and this site uses no advertising or tracking cookies.

Who keeps your data

Spyros Sevastelis (Mastercraft), Greece, is responsible for the data on this site. You can reach us at support@getmastercraft.com.

What we keep, and why

• Your account: the name and e-mail you give, and your password (stored only as a secure hash). We need them to run your account and send you the password link.
• Your ledger (keepers): the Mastercraft game file the Sync app or your ledger page sends: your WoW account folder names and your characters’ names, levels, realms, professions, gold, gear, bags, bank and mail. We use it only to show you your ledger, and nobody else sees it. It stays while your site account exists, also after a plan ends, so it is there if you come back. Delete it any time with “Delete my ledger data” on your ledger or account page, with or without a plan.
• Your linked PCs (keepers): for each PC you link to the Sync app we keep its name, a hashed id, when you linked it, when it last sent your ledger and the app version, so you can see and remove your PCs (up to 2). Remove on your ledger or account page deletes them at once, also after a plan ends.
• Your plan: which plan you have and until when. Paddle tells us this; it never gives us your card details.
• Cooldown alerts (keepers): whether you want them by e-mail and, if you link one, the link to your Discord channel. Turn them off or unlink any time in your ledger.
• Craft requests (keepers): the requests players send through your crafter pages (the last 30), and for each page the character names of the requests you mark done, so the page can show the “Trusted crafter” mark once you finished crafts for 10 different players. They go when you delete your account.
• The Founders’ Wall (founders): if you choose, your name is shown on the Founders’ Wall on this site. You can take it off at any time from your ledger page.
• Your founder’s certificate (founders): a PDF with the name you use here, your founder number and the day you took the seal, sent to your e-mail. Anyone who types its code on the Founders’ Wall page sees that name, number and day, so they can tell it is genuine; without the code nothing is shown.
• Visit counts: which pages are visited, where a visit came from, screen width, browser language, country, time on page and a few button clicks. A visitor is counted with a code made from the IP address and browser that changes every day and cannot be turned back into either. We do not store IP addresses for this, set no cookies and do not follow you to other sites. We keep these counts for up to 400 days.

Cookies

Only the cookies needed to keep you signed in. Your browser also keeps a few things on your device, not on our server: your progress and faction choice in each guide, the region you picked on the Crafters list, and whether you closed a site message, such as the plans or founder message. No visitor ID is kept on your device. No advertising, no third-party trackers.

Who else sees it

• Paddle.com, our Merchant of Record, when you buy a plan. Paddle has its own privacy notice.
• Blizzard Entertainment: to show item names and icons, and to find your character’s picture, our server looks them up on Blizzard’s public game data and armory. Only item numbers and the character’s name and realm are sent, never your e-mail or account. Item icons, character pictures and their backgrounds are then copied once to our server, so your browser never asks Blizzard for them.
• Discord, only if you link your own Discord channel: we post cooldown alerts (the cooldown’s name and your character’s name) and craft requests from your crafter pages to the link you gave, nothing else. Unlink it any time in your ledger and we delete the link.
• Anyone on the web, only for a character you turn into a public crafter page yourself: its name, level, race, class, realm, faction, guild, professions and known recipes. Never your gold, bags, e-mail or account. Hide the page any time and it is gone.
• The Crafters list: the same public crafter pages, listed by realm so players can find a crafter. Signed-in founders can use it from 1 December 2026, and everyone from 1 January 2027. You can keep a page out of the list from your ledger and still keep the page itself.
• The owner of a crafter page, when you send a craft request on it: the recipe, the character name and the note you write go to that player (by e-mail or their Discord channel) and stay on their ledger until they clear it (the last 30). We ask no e-mail and no account. To stop too many requests, we keep a scrambled form of your internet address for one hour, never the address itself.
• Our hosting provider, which stores the site for us and may not use the data for anything else.
• Nobody else. We never sell or rent your data.

Blizzard, Paddle and Discord may handle data outside the EU under their own safeguards.

Why we may use it

• Your account, ledger, linked PCs and plan: to give you the service you signed up for (a contract with you).
• Visit counts: our legitimate interest in knowing which pages help players. You can object at any time by writing to us.
• Cooldown alerts, craft requests you receive, the founder’s certificate: part of the service you signed up for (a contract with you).
• The Founders’ Wall, your public crafter pages and their place in the Crafters list: your choice (consent), which you can take back at any time by hiding them.
• A craft request you send to a crafter: to pass on the message you chose to send (our legitimate interest, and yours). The one-hour scrambled address: our legitimate interest in stopping spam.

Your rights

You can ask to see, get a copy of (also in a file you can take elsewhere), correct, limit or delete your data, or object to how we use it, at any time. Deleting your account from your ledger page removes your account and your ledger at once. For anything else, write to us at support@getmastercraft.com. If you are unhappy with how we handle your data, you can also complain to your data protection authority; in Greece that is the Hellenic Data Protection Authority (dpa.gr).

Changes

If this policy changes, we put the new date at the top, and we e-mail account holders about changes that matter.