WOR COMPANION · Your inventory, your session.
Your data, explained clearly.
Last updated: 11 October 2026
Who is responsible?
Anthony VIGNAUX, France, is responsible for the website’s processing of personal data. For any privacy question or request, write to [email protected]. This is a private, non-professional project.
What the service uses
When you request an import, the companion sends hero, equipment and artifact instance identifiers, development levels, stats, ownership and relevant account bonuses, plus export time, compatibility and language. No game password, login token, full memory dump or currency balance is requested. These identifiers may relate to you even without a name or account on this website.
Why and on what basis?
The inventory is used only to provide the optimizer and reservations you request: performance of the service under Article 6(1)(b) GDPR. Network addresses are processed to deliver responses and protect the service from abuse, based on legitimate interests under Article 6(1)(f). There is no advertising, audience tracking, resale or unrelated profiling.
How long?
Inventory, results and reservations stay in server memory and expire after 30 minutes without an API interaction; cleanup runs every 30 seconds. Closing the tab does not immediately delete them: use Clear my session to delete them now. A transfer ticket expires within 10 minutes and is usable once. In-memory abuse counters expire within 10 minutes. Session identifiers disappear at deletion or expiry; the browser session cookie is not an inventory backup.
Recipients and storage
Optimization runs on the OVH VPS planned in Roubaix, France. Inventory is not written to an application database or backup. Cloudflare, Inc. is the planned reverse proxy/security provider: it processes network and request data and may process traffic outside the EEA under its DPA and applicable transfer safeguards. The companion payload stays encrypted until our server; browser API responses pass through Cloudflare. Our access logs are disabled; providers have separate infrastructure/security retention policies. No external fonts, advertising or audience analytics are enabled.
Your choices and rights
Importing is optional, but the optimizer needs an inventory to calculate a build. Clear my session deletes the inventory and reservations. You can request access, correction, deletion, restriction and, where applicable, portability or objection at [email protected]. We normally respond within one month. Because sessions are anonymous and short-lived, contact us while the session exists; never send a game password. You can complain to the French supervisory authority, CNIL, at cnil.fr/plaintes.
Messages you send
Email requests necessarily include your email address and message. They are handled separately from inventory sessions, only to answer or manage a rights request. Routine correspondence is deleted within 12 months after resolution, unless a legal dispute requires preservation. The website has no contact-form database or mailing list.