PRIVACY
Anonymous visitorpopularity
When visitor popularity is enabled, revealing a map attempts to send an anonymous popularity ballot. Your recommendations work whether or not the ballot service is available.
Shared reasons
When community reasons are enabled, viewing a map loads aggregate reason counts. Reasons are submitted only when you press “Share my reasons.” The application stores a daily token hash, a character ID, one or two selected reason keys, and creation time in a separate table. No written comments or personal names are collected.
One contribution is kept per browser token, character and UTC day. Sharing again updates that day's reasons rather than adding another contribution. Counts can include the same person on multiple days or browsers and are not counts of unique people. Two reasons may be selected, so their counts can sum to more than the contribution total.
The browser uses the same random local ballot token described below, but reason hashes use a separate namespace. Aggregate counts may be shown from the first contribution. Contributions are retained while this feature operates and removed if it is discontinued. Unsaved reason choices stay in page memory.
What the application stores
Each anonymous ballot has four stored fields: a generated ballot ID (id), a SHA-256 hash of the browser's daily token (daily_token_hash), the one to three selected character IDs (character_ids), and the creation time (created_at).
What it does not store
No accounts, names, email addresses, IP addresses, referrer or user-agent values, or raw browser tokens are stored with a ballot. The application does not store a profile or use these ballots for advertising, personalization, or tracking across sites.
Purpose and daily limit
Ballots are used only to calculate visitor character popularity rankings. The browser keeps a random local token; the application hashes it with the UTC date so the same browser token can be counted once per UTC day. Clearing or blocking browser storage can bypass this lightweight limit.
Retention and hosting logs
Anonymous ballots are retained while visitor rankings operate and deleted if the ranking feature is discontinued. This describes application ballot storage. Hosting providers may separately keep request logs under their own operational policies.