Privacy

What WoWUI collects, why, and who else sees it. Last updated 1 September 2026.

The short version

The desktop app works without an account. Scanning your game folder, exporting a UI, importing one and creating restore points all happen on your own machine and send nothing anywhere. An account is only needed to publish a UI, to browse published ones or to keep copies off your disk.

There is one switch that changes this, and it starts off: Auto-upload backups in Settings sends each finished restore point to your account by itself. With it off, a restore point only leaves your machine when you press the button on it.

Controller

A private individual in Austria, reachable at support@wowui.app. Every request under the rights listed below is answered from that address.

This website

The site is static: no analytics, no advertising, no tracking cookies, and no cookies of any kind. Our hosting provider records the usual server log data — IP address, time, the file requested, referrer and browser string — to deliver pages and defend against abuse. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in operating the site. Hosting is by World4You Internet Services GmbH, Austria.

If you apply as a beta tester

The form at wowui.app/beta asks for a Discord name, optionally an email address, and a set of answers about your World of Warcraft installation — which version you play, how you install addons, roughly how many characters you have. We use them for one thing: choosing testers whose setups cover the cases the app has to survive. Legal basis: Art. 6(1)(a) GDPR, the consent you give with the last checkbox on the form.

The form does not save anything on this website. It sends one email to beta@wowui.app through the mail server of World4You, the same Austrian provider that hosts this site — sender and recipient are both mailboxes there, so it does not pass through any other company. If you gave an address, it is used as the reply address and nothing else.

Applications are deleted when the beta ends. Withdrawing consent, or asking for your application to be deleted before then, takes one line to beta@wowui.app.

If you create an account

We store your email address, a display name, and — if you upload them — a profile picture and banner. Accounts, sessions and files are handled for us by Supabase, on servers in Ireland (eu-west-1) — inside the EU. Legal basis: Art. 6(1)(b) GDPR, performing the contract you asked for.

Authentication emails — confirming an address, resetting a password, telling you a password or address changed — are sent from support@wowui.app through the mail server of World4You, the same Austrian provider that hosts this site. They do not pass through any other company. We do not track whether you open them and the emails contain no tracking pixel.

If you take out a Premium membership

Premium is switched off and cannot currently be taken out, so nothing in this section is happening right now. It is described anyway, because the way it works is what you would be agreeing to if it comes back — and because a section that quietly disappears is harder to check than one that says it is dormant.

Premium is optional and is handled by Patreon (Patreon, Inc., United States). Patreon takes the payment, adds the VAT of the country you are in, and holds whatever payment details you give them. We never see a card number, a bank detail or an address.

When you connect Patreon to WoWUI you are sent to Patreon to approve it. What comes back to us and is stored is: your Patreon user id, the name shown on your Patreon profile, and whether your membership of our campaign is active. From that we derive what your account is allowed to keep. We do not store a Patreon access token; it is used once, to ask that one question, and discarded. You can disconnect the link in the app at any time, which deletes it.

Legal basis: Art. 6(1)(b) GDPR, performing the membership you asked for. Because Patreon is in the United States, this involves a transfer outside the EU — see below.

If you publish a UI

A published UI is public. Its name, description, tags, screenshots, the addons it needs, your display name and your profile picture can be seen by anyone. The package itself contains addon settings — the files World of Warcraft writes — which can include character and realm names you set up in those addons. Look at what you are publishing before you publish it. You can unlist or delete a UI at any time in the app.

Identifying addons

To show real addon names instead of folder names, the app calculates a fingerprint of each addon folder and asks CurseForge which project it belongs to. Fingerprints and project ids are sent; no file contents and nothing about you or your characters. CurseForge is operated by Overwolf, outside the EU. This happens whether or not you have an account, and the results are cached on your machine so a folder is only ever asked about once.

The icons those projects come with are loaded from CurseForge's image server, media.forgecdn.net, which receives your IP address as any image request would. No other addon service is contacted: WoWUI does not compare addon versions against providers and does not talk to Wago, WowUp or TukUI at all.

Updating the app

WoWUI checks once at start whether a newer version exists by fetching a small file from wowui.app. That request reaches our hosting provider like any other and appears in its server logs. Nothing about you, your account or your game folder is sent with it.

Connecting Battle.net

Optional. If you connect it, we receive your BattleTag and the list of characters on your account, so the app can label your setups with the right character. Connecting is your consent under Art. 6(1)(a) GDPR and you can disconnect it in the app at any time.

Restore points in the cloud

Only if you send them there — either by pressing the button on one, or by switching on Auto-upload backups, which is off unless you turn it on. A cloud restore point contains addon settings and your interface layout — never addon code, and never anything outside your game folder. Because those are the files World of Warcraft writes, they can contain character and realm names.

Your plan keeps a fixed number of them. When a new one arrives and the number is full, an older one is deleted to make room — automatic copies first, and one you sent yourself only when there is no automatic one left. Everything on your own disk is untouched by that.

If you report a listing

A report records which listing it is about, the reason you picked and your account, so we can look into it and so the same listing cannot be reported endlessly. Reports are never shown to the person reported and are not readable by anyone but us. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in keeping the catalogue lawful and usable.

Where the data goes outside the EU

One recipient is outside the EU while Premium is off: CurseForge (Overwolf) for addon identification, which receives fingerprints and your IP address but nothing about you or your account. Patreon (United States) would be the second, but only for someone who takes out a membership — and none can be taken out at the moment. Everything else — your account, your listings, your files and your restore points — stays with our provider in the EU.

How long we keep things

Account data for as long as the account exists. Published UIs until you delete them. Cloud restore points until you delete them or the retention above removes one. Server logs for a short period as set by our hosting provider. Deleting your account removes your profile, your published UIs, your cloud restore points and your Patreon link.

There is no automated decision-making and no profiling. Nothing here is used to advertise to you, and nothing is sold or passed on for anybody else's purposes.

Your rights

You can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Write to support@wowui.app. You also have the right to complain to a supervisory authority — in Austria, the Datenschutzbehörde (dsb.gv.at).