Privacy Policy
Last updated October 14, 2026 · Terms of Service · Privacy Policy · Contact
This policy explains what Gazlowe (the Discord bot, this website and the Gazlowe addon, run by the operator of this site) keeps about you, why, and what you can do about it.
In short: Gazlowe keeps only what its guild features need. It doesn't sell your data, show ads, or use analytics or tracking cookies.
1. What we keep
| From | What | Why |
|---|---|---|
| Discord, in servers that have Gazlowe | Your Discord user ID, and your name, avatar and roles as Discord shows them | To know who made a request or signed up, show names, and check who is an officer |
| What you do with Gazlowe | Bank requests (character, item or gold amount, notes, status, who handled them); event sign-ups (character, class, role, tentative / late / absent, notes); your saved characters; soft reserves; attendance and loot records; guild applications (your answers, and the DMs you send Gazlowe about them) | To run the guild bank, calendar, soft reserves and history |
| Server admins and officers | Channel and role choices, time zone, event types, uploaded pictures, the low stock watchlist | To set Gazlowe up for that server |
| The addon, uploaded by an officer | The WoW guild and realm, guild bank contents and gold, the bank's logs (character names, items, amounts, rough times), raid rosters (character names and classes), loot awards and rolls, and which character scanned | For bank stock, the deposit and withdrawal log, loot history and attendance |
| Logging in to this website | Your Discord user ID, username, avatar, and which servers you share with
Gazlowe (Discord's identify and guilds permissions) | To show you your servers' pages; kept in your login cookie, not in our database |
| Emails you send us | Your email address, name and message | To answer you |
Gazlowe can't read your chat messages in servers: it doesn't ask Discord for that permission. It only sees its own buttons, commands and forms when you use them, when members join or leave (to welcome them), and messages you send Gazlowe directly (DMs): if you've applied to a guild, those are passed on to that guild's officers.
2. Who can see it
A server's records are visible to that server's members, in Discord and on this website, and officer pages to its officers. Guild applications are only shown to the officers who review them. Gazlowe sends you Discord messages about your own requests, events and applications. Nothing is shown to other servers.
3. Cookies and browser storage
- A login cookie, for 7 days or until you log out; a cookie for the login step itself (10 minutes); and a cookie that carries a one-time message after you save something (60 seconds).
- Your browser's own storage remembers your calendar filter, your browser choice on the Sync page and when each file was last uploaded. On the Sync page it also remembers the WoW folder you picked; that stays in your browser and is never sent to us.
None of this is used for ads or tracking.
4. The Sync page
When you connect your WoW folder, your browser lets the page read that folder. It reads only the Gazlowe save files
(Gazlowe.lua, and GuildBankBotSync.lua from the older addon) and uploads their contents.
Nothing else on your PC is read or sent, and the page can't change your files.
5. Who else handles it
We don't sell or rent your data, or share it for advertising. These services handle it so Gazlowe can run:
- Microsoft Azure hosts the bot, the website and the database, including backups.
- Discord carries everything the bot does, and handles website logins.
- Cloudflare provides this site's domain name service.
- Wowhead provides item tooltips: pages with items load Wowhead's tooltip script and item data, so your browser contacts Wowhead, which sees your IP address under its own privacy policy.
We may disclose data if the law requires it.
6. How long we keep it
- Server records are kept while a server uses Gazlowe. When Gazlowe is removed from a server, everything it kept for that server is deleted automatically 30 days later, unless Gazlowe is added back in that time. Ask us (below) to delete it sooner.
- Emails you send us are kept while we need them to answer you, and deleted within a year.
- Database backups are kept for up to 7 days.
- The service's logs, which can include usernames and what they did, are kept for about 3 days.
- The addon keeps loot awards and raid rosters on your PC for 30 days.
7. Your choices
- Delete your data yourself at any time on the My data page (log in with Discord), for one server or all of them. Your saved characters, sign-ups and soft reserves are deleted and your open bank requests cancelled; your guild's records (attendance, loot, old bank requests, and your characters' names in the guild bank's log) keep existing as "Deleted user".
- You can also leave events, cancel your requests and change your characters yourself.
- You can ask us for a copy of your data, or ask us to correct or delete it.
- A server admin can ask us to delete all of their server's data.
Send requests by email at support@gazlowe.com. We reply within 30 days, and may ask you to show the Discord account is yours first.
8. Your rights, including under the GDPR
We (the operator of this site) decide how this data is used, so we are its "controller". We use it because it is needed to provide the features you and your server choose to use, and for our legitimate interest in keeping the service working and safe. Depending on where you live (for example in the EU, the UK or California), you have the right to see the data we hold about you, correct it, delete it, limit or object to how it's used, and get a copy in a common format. You can also complain to the data protection authority where you live.
The data is stored with Microsoft Azure in the region chosen for this service. If you live elsewhere, it is transferred there and protected under Microsoft's data protection terms.
9. Security
Connections to the website and the database are encrypted, the database is encrypted at rest, secrets are kept in a key vault, and every page checks that you are allowed to see it. If your data is ever accessed without permission, we will tell you as the law requires, and tell Discord. No system is perfectly secure, so don't put anything sensitive, such as passwords, in notes or requests.
10. Children
Gazlowe isn't meant for children. You must be old enough to use Discord where you live (at least 13).
11. Changes
We may update this policy. The date at the top shows the latest version.
12. Contact
For a copy of your data, to delete it, or with any question about privacy, reach us by email at support@gazlowe.com.
