Privacy

On your device

The planner keeps device plans, party setups and preferences in your browser. Signing in does not automatically upload that library. Clearing your browser storage can remove those local copies, so export plans you want to keep.

The in-game addon keeps imported plans and settings in your game installation. Moving a plan between the website and addon uses an explicit copy and import; the addon does not sign into your website account.

If you choose an account

Where account features are available, Google or Discord verifies your sign-in. KeyCaller stores the provider name and its account identifier to recognize your account. Google sign-in requests only basic identity (openid); Discord requests identify. We do not request access to your email messages, files, Discord servers or conversations. Your provider handles your password. Provider access tokens and profile details are not retained in KeyCaller's account database.

Google and Discord currently create separate KeyCaller libraries. Account saves store the plans you select, including their names, dungeon, key, route, party, notes and timer settings, together with revision dates and sharing permissions. We use this information to deliver saved plans, history and the access you choose. We do not sell account data or use your saved plans for advertising.

Essential secure cookies keep you signed in and complete a sign-in attempt. The server stores hashed session tokens, activity times and security state. Request addresses are processed for abuse prevention; rate-limit keys use changing hourly hashes, which are not a promise of anonymity.

Choose what you share

A snapshot link contains a copy of a plan. Anyone who receives it can open or forward it; changing or deleting your original does not revoke that copy. Account invitations let a recipient accept view or edit access. Accepted members can read plan content and keep copies. Revoking their access stops future account access, but cannot erase files or device copies they already saved.

Plan notes, names and invitation labels are content you provide. Avoid putting passwords or personal information in them.

Hosting and connected services

Cloudflare hosts the website and account database and processes requests for delivery, security and reliability. Cloudflare Web Analytics provides aggregate website usage and performance measurements. Its current documentation says it does not log query strings. Cloudflare analytics details · Cloudflare privacy policy.

Google or Discord receives requests when you choose its sign-in option. Spell tooltips and artwork can load from Wowhead; a compression library loads from Cloudflare's cdnjs service. These services receive the requests your browser makes and apply their own policies. Run lookups send the log or character identifiers you submit to KeyCaller's lookup service, which queries Warcraft Logs or Raider.IO. Public run evidence can include character names and group composition.

Account application logs do not record plan bodies or sign-in tokens. We inspect aggregate service errors, storage and usage to keep the service working. Hosting providers may process additional request information under their policies.

Keeping and removing data

Saved account plans remain until you remove them or close the account. A plan retains up to ten recent revisions; older revisions are pruned as new ones are saved. Sessions expire after seven days, or after 24 hours without use. Sign-in attempts expire after ten minutes and unused invitations after three days. Expired records are cleaned up in bounded scheduled batches, so removal may follow expiry.

In the account library, Your account data lets you download owned plans and review account deletion. Closing an account removes its identity, sessions, owned plans and history, invitations and memberships from the active database. Other owners' plans and copies previously exported or shared remain. Revoking Google or Discord consent alone does not delete a KeyCaller library.

Cloudflare's database recovery system may retain earlier database states for its recovery window. Account deletion is not a promise that every provider recovery copy disappears immediately. Database recovery retention. Contact us for privacy or data-access requests not covered by the app's controls.

Contact KeyCaller

KeyCaller is an independent community project. For privacy questions, access or correction requests, contact joshlansdev@gmail.com. Please do not send passwords, sign-in codes or client secrets.

We will update this notice when the service's data practices change and show the updated date here.