Privacy Policy

Last updated: 8 October 2026

This notice explains how MogForge handles the limited data used to run and protect the service.

Who operates MogForge

The data controller is Orosz Máté, operating MogForge as an individual. For privacy questions or requests, contact [email protected].

What MogForge processes

• Technical request data: request time, requested page, response status and performance information. Cloudflare also processes information such as IP addresses and traffic data to deliver, secure and cache the site.
• Cookie-free website analytics: Cloudflare Web Analytics records page views and performance measurements, together with limited dimensions such as page path, referring site, approximate country, browser, operating system and device type. Cloudflare states that this service does not use cookies or browser storage for analytics, does not record URL query strings, and does not fingerprint individual visitors.
• First-party feature measurement: MogForge counts selected product actions—such as opening the Transmog or Community gallery, using a gallery filter, saving or sharing an outfit, and downloading an outfit image—as daily totals. Search text, email addresses, full IP addresses, page query strings and stable visitor identifiers are not included. The browser keeps only the first and most recent visit dates so it can send a broad return interval instead of an identity.
• Feedback and Community reports: if you send feedback or report a Community outfit, MogForge stores the category, your message, the page address and submission time. An email address and account are not required. Please do not include sensitive personal information.
• Shared outfit links: if you create a share link without an account, MogForge stores the outfit name, item references, character appearance and a random link token. Anyone with the link can view and remix that outfit. Creating a link does not publish it to the Community gallery.
• Community posts: a Community post publicly displays its name, outfit, character details and exported preview image. Other visitors can see its views and votes and open it for remixing. Guest posts receive a random management token whose one-way hash is stored by MogForge; the token itself stays in that browser so the post can be deleted or claimed after sign-in.
• Accounts and Community features: if you create an optional MogForge account, MogForge stores your email address, a one-way password hash, login sessions, saved outfits, claimed or account-created Community posts and votes.
• Account emails: MogForge sends email-address verification and password-reset messages when you request those account actions. The links contain random, one-time tokens; only a one-way hash of each token is stored by MogForge. Verification links expire after 48 hours and password-reset links expire after 1 hour.
• Cookies and browser storage: your theme, character choices, current transmog items, recommendation preferences, guest-post management tokens, and first and most recent visit dates are saved locally in your browser. Signing in uses a secure session cookie. Cloudflare may also use cookies that are strictly necessary for security and traffic management.
• Advertising, when enabled: the catalogue may display Google AdSense advertisements. Third-party vendors, including Google, use cookies to serve ads based on a visitor’s prior visits to MogForge or other websites. Google’s advertising cookies enable Google and its partners to serve ads based on visits to this and other sites. Depending on your location and consent choices, Google and participating advertising partners may also process device identifiers, IP address, browser information, approximate location and ad interactions to deliver ads, limit repetition, prevent fraud, measure performance and—only where permitted—personalize advertising.

Why this data is used

Technical and analytics data is used to provide the site, prevent abuse, understand aggregate usage, diagnose errors, measure page performance and improve MogForge. Feedback is used to fix problems and guide development; Community reports are used to review and moderate public outfits. Shared-outfit and account data is used to provide the saving, loading, sharing, Community posting and voting features you request. When advertising is enabled, advertising data is used to fund the service, deliver and measure ads, prevent advertising fraud and, where you consent, personalize ads. These purposes rely on the operator’s legitimate interests in running and improving a secure service, on providing features you request, and on consent where applicable law requires it.

Blizzard game data

MogForge retrieves World of Warcraft game data through the Blizzard Developer APIs. Blizzard Entertainment is the source of this game data. The data is provided to visitors on an “as is” basis, without a guarantee that it will always be available, complete or current. MogForge does not offer Battle.net sign-in and does not request or store your Battle.net credentials.

Storage and retention

Feedback and Community reports are retained for no longer than 12 months. First-party feature measurements are retained only as daily totals for up to 400 days. Account data, saved outfits, Community posts and gallery votes are kept until you remove them or, for account data, delete the account. Guest Community posts can be deleted from the posting browser while its management token remains there, or claimed by an account on that browser. Account-free shared links are retained so the link remains usable; you can request removal by sending the link through the privacy contact below. Deleted data may remain in restricted disaster-recovery backups for up to 14 days before automatic removal. Login sessions have a 30-day maximum lifetime, expire after 7 days of inactivity, and are removed automatically. Operational logs are rotated automatically and are not kept as a permanent visitor history. Cloudflare Web Analytics makes recent and aggregated statistics available according to Cloudflare’s service retention. Browser storage remains on your device until you clear it through the site or your browser.

Service providers

• Cloudflare provides DNS, security, caching and cookie-free Web Analytics. Requests and analytics measurements pass through Cloudflare’s global network, so limited technical data may be processed outside the EEA under Cloudflare’s applicable transfer safeguards. Learn more in Cloudflare’s Web Analytics documentation.
• Hetzner Online GmbH provides application hosting and storage.
• Resend provides delivery of requested account-verification and password-reset emails. MogForge sends Resend the destination email address and the transactional message needed to complete that request.
• Google AdSense, when advertising is enabled, provides and measures advertisements and helps detect invalid traffic. Google and participating third-party advertising vendors or networks may use cookies to serve ads as described above. See Google’s advertising technologies information and how Google manages ad technology partners. The consent controls identify the selected partners and their information when advertising is enabled.

MogForge does not sell personal data and Cloudflare Web Analytics does not use analytics cookies. Optional accounts are used only for saved outfits and Community features.

Your choices and rights

You can download a copy of your account and saved-outfit data or delete it directly from the Account window. You can also delete individual claimed Community posts there, or delete an unclaimed guest post from the browser that published it. When advertising consent is required, the consent controls let you accept, reject or later revisit non-essential advertising choices. You can opt out of personalized advertising from Google through Google Ads Settings and opt out of some other participating vendors through YourAdChoices; these choices do not necessarily remove all ads. Depending on applicable law, you may request access, correction, deletion, restriction or objection, and may lodge a complaint with your local data-protection authority. For an account-free shared link or guest post you can no longer manage, include the link so it can be identified. For privacy questions or requests, email [email protected] or use Send feedback → Privacy request.

Changes

This notice may change as MogForge develops. The current version and update date will remain available on this page.