♦ Legal
Windrose Server List ("we", "us", "our") is an independent, community-run server directory for the Windrose game, accessible at windrose-serverlist.com. For privacy-related questions, contact us at [email protected].
Account data. When you register, we collect your username, email address, and a hashed (bcrypt) version of your password. We never store your password in plain text.
Server listing data. When you submit a server, we store the information you provide: server name, description, tags, connection details, region, language, and any optional links you supply.
Vote data. When a vote is cast, we store the server ID, the voter's IP address, and the timestamp. This is used solely to enforce the one-vote-per-day-per-server limit.
Login data. We store your last login timestamp and IP address on your account record to help with security and fraud detection.
Contact form data. If you contact us via our contact form, we receive your name, email address, subject, and message. This is used only to respond to your inquiry.
Automatically collected data. Like most websites, our server software logs standard request data (IP address, browser user agent, pages visited, timestamps) for security and performance purposes. These logs are not shared with third parties and are retained for a limited period.
We use the data we collect to: operate and improve the directory; authenticate your account and protect it from unauthorised access; enforce voting fairness; respond to your support inquiries; and detect and prevent abuse, fraud, or violations of our Terms of Service.
We do not use your data for advertising, we do not sell it, and we do not share it with third parties except where required by law.
We use a single session cookie (wr_session) to keep you logged in. This is a functional cookie — it is required for the site to work when you are signed in. We do not use tracking cookies, advertising cookies, or any third-party analytics scripts.
We load fonts from Google Fonts. Google may set its own cookies or log requests as part of that service. If you would prefer not to load Google Fonts, you can block them via your browser's content blocking settings.
Account data is retained for as long as your account exists. If you delete your account, your personal data (username, email, password hash) is removed from our systems. Server listings submitted under your account will remain in the directory but will be disassociated from your account.
Vote records are retained indefinitely as aggregate ranking data. Individual IP addresses stored in vote records may be anonymised or purged periodically.
We take reasonable technical measures to protect your data: passwords are hashed with bcrypt, sessions use secure, HTTP-only cookies, all forms include CSRF protection, and we apply standard HTTP security headers. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
You can update your username and email address at any time from your account settings. You can delete your account from the same page. If you would like to request a copy of the data we hold about you, or to have it deleted in full, contact us at [email protected] and we will respond within a reasonable timeframe.
The Site is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date below. Continued use of the Site after changes are posted constitutes your acceptance of the revised policy.
Privacy questions or requests? Email us at [email protected] or use our contact page.
Last updated: June 3, 2026