Privacy
Who runs Pagle
The Operator is the controller of your personal data on Pagle. Pagle has no data protection officer.
The terms
By signing in with Battle.net, you agree to these terms and this privacy notice.
- Every Angler Pagle verifies as yours is Published unless you keep it private. A Published Angler has a public Angler page, appears on the Leaderboards and Region firsts, in the Feed of Players who follow it, and in other Players' in-game views through their Pagle Companion.
- You can keep any Angler private on the Keep-private screen Pagle shows you for each new Angler, or later with the Published switch in its Angler settings. You can also hide any of its characters.
- A Catch log that isn't verified yet is Pending: only you can see it.
- Pagle is a free hobby project run by one person. There's no status page and no promise of uptime or support.
- The Operator suspends a Player only for abuse of the service, such as sharing credentials, flooding Uploads, uploading other people's logs, or harassment through the contact address. While you are suspended, none of your Anglers appear anywhere.
- The Operator excludes an Angler that looks forged. An excluded Angler is left off the Leaderboards and Region firsts; its Angler page stays up.
What Pagle keeps, why, and for how long
| Data | Purpose | Legal basis | Kept until |
|---|---|---|---|
| Your Player: your Battle.net account ID, BattleTag, Support code and sign-in times | The service: signing you in and keeping your Anglers yours | Contract, Art. 6(1)(b) GDPR | You Delete everything |
| Your Battle.net character list | The service: verifying which characters are yours | Contract, Art. 6(1)(b) GDPR | A WoW account: until signing in again no longer lists it. A character: at most 30 days while Battle.net doesn't confirm it |
| Website sessions | The service: keeping you signed in | Contract, Art. 6(1)(b) GDPR | 30 days without use, sign-out, or Delete everything |
| Linked Pagle Companions | The service: letting your Companion upload and download | Contract, Art. 6(1)(b) GDPR | You revoke it, or 180 days unused |
| Companion links in progress | The service: linking a Companion | Contract, Art. 6(1)(b) GDPR | 10 minutes, or until the Companion picks up the link |
| Catch logs and their characters | The service: storing and folding your fishing progress | Contract, Art. 6(1)(b) GDPR | You delete the Catch log, its Angler, or everything |
| Records of deleted Catch logs | The service: keeping a deleted Catch log from coming back | Contract, Art. 6(1)(b) GDPR | You allow the Catch log again, or Delete everything |
| Anglers and their characters | The service: showing your Anglers | Contract, Art. 6(1)(b) GDPR | The Angler or everything is deleted |
| Your choices for each Angler: Published or not, and hidden characters | The service: showing only what you choose | Contract, Art. 6(1)(b) GDPR | You delete the Angler or everything |
| What Pagle works out from your Catch logs: Angler pages, leaderboard rows, Region firsts, highlights and in-game views | The service: showing your Anglers' progress | Contract, Art. 6(1)(b) GDPR | Replaced whenever the Angler's Catch logs change; deleted with the Angler |
| Follows you make | The service: your Feed and Following views | Contract, Art. 6(1)(b) GDPR | You unfollow, the Angler is unpublished or deleted, or you Delete everything |
| Results of the automated checks, clearances, and the Operator's exclusions | Fair Leaderboards and Region firsts | Contract, Art. 6(1)(b) GDPR | Deleted with the Angler |
| The Operator's daily digest email | Fair Leaderboards and Region firsts | Contract, Art. 6(1)(b) GDPR | 7 days after it arrives |
| The operator log: what the Operator changed by hand, and when | Accountability | Legal obligation, Art. 6(1)(c) with Art. 5(2) and Art. 12 GDPR | Deleted with its Player or Angler |
| Server logs and error events, which carry internal IDs only | Security and availability | Legitimate interest, Art. 6(1)(f) GDPR | Logs: Clever Cloud's log retention. Error events: 90 days |
| Your IP address | Security and availability (rate limits), and the country of a page view (Page views below) | Legitimate interest, Art. 6(1)(f) GDPR | Held in memory only, never stored |
| Backups of the database | Security and availability | Legitimate interest, Art. 6(1)(f) GDPR | 7 days |
| Your emails to the Operator, and the replies | Answering your requests | Legal obligation, Art. 6(1)(c) with Art. 5(2) and Art. 12 GDPR | 3 years after the answer; a reply carrying your data is deleted 7 days after it is sent |
A Follow is your own data: it is private to you, processed under the contract, and erased when you unfollow or Delete everything.
Who receives your data
- The public sees what a shown Angler shows: its Angler page, and its places on the Leaderboards and Region firsts.
- Other Players see it through their Follows, their Feed and their Pagle Companion's in-game views.
- Blizzard is a separate controller for Battle.net sign-in and the character lists Pagle reads from its Profile API: Blizzard Entertainment Ireland Limited (Cork, Ireland) and, for certain platform services, Blizzard Entertainment, Inc. (Irvine, USA). See Blizzard's privacy policy.
- These processors, each under a data processing agreement:
- Clever Cloud SAS (Nantes, France): hosting, the database and its backups, and logs; processing in the EU.
- Scaleway SAS (Paris, France): the off-site copy of the database, stored in Amsterdam, and the email service for the Operator's daily digest; processing in the EU.
- GlitchTip, run by Burke Software and Consulting LLC (New York, USA): error events, which carry internal IDs only and no name, BattleTag, IP address or entry text. They are stored in GlitchTip's EU region (Frankfurt) and deleted after 90 days.
UptimeRobot (UptimeRobot s.r.o., Bratislava) and healthchecks.io (SIA Monkey See Monkey Do, Rīga) receive no Player data, so they aren't processors. GitHub hosts Pagle's code and runs its tests on sample data only; it processes no Player data.
Pagle Companion contacts pagle.app, and GitHub to check for updates. An update check carries no Player data but, like any request, your computer's IP address.
Transfers outside the EU
- GlitchTip's provider is in the USA and isn't certified under the EU–US Data Privacy Framework, so the transfer rests on the EU standard contractual clauses (Module 2, controller to processor) in GlitchTip's data processing agreement (Common Paper DPA v1.1). The events are stored in GlitchTip's EU region. GlitchTip's subprocessors include Cloudflare, which may route traffic through servers outside the EU in transit.
- Blizzard's own transfers to the USA are Blizzard's, under standard contractual clauses, as its privacy policy says.
- There is no other transfer outside the EU.
Your rights
- Access and portability (Art. 15 and 20 GDPR): write to the contact address quoting your Support code, and you get your data as a zip by email.
- Erasure (Art. 17 GDPR): Delete this Catch log, Delete this Angler and Delete everything take effect at once. If you can't sign in, or are suspended, write in with your Support code and the Operator deletes it for you.
- Objection and restriction (Art. 21 and 18 GDPR): unpublish an Angler or hide a character. Both take effect at once and need no reason.
- Rectification (Art. 16 GDPR): Pagle stores nothing you type; every value comes from the game through a Catch log, or from Battle.net. To correct a wrong value, upload the Catch log again or sign in again.
The Operator answers requests by email within one month. You also have the right to complain to the supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
Your right to object
You can object at any time to Pagle publishing your Anglers: unpublish any of them, or hide any of their characters, in Angler settings. To object to anything else, write to privacy@pagle.app.
Cookies
Pagle sets only the cookies the service needs: __Host-pagle_session, which keeps you signed
in; __Host-pagle_signin, which holds a sign-in while you are at Battle.net; and
XSRF-TOKEN, which protects the forms you send before signing in. There is no consent banner
and no other cookie, and Pagle's pages load nothing from other websites.
Page views
Page views. When you open a page, Pagle counts it: the day, which page it was (never the address of a particular Angler), the website you came from (its name only), and your country. The country is looked up from your IP address in DB-IP's database, and the IP address is then dropped; it is never stored. Nothing is stored on or read from your device for this, and no browser details are kept. Pagle uses these counts to see which pages are used and to keep the site working (Art. 6(1)(f) GDPR). You can object at any time by writing to the contact address above. IP geolocation by DB-IP, licensed under CC BY 4.0.
Automated checks
Automated checks. Every time your Catch logs change, Pagle runs automatic checks for things the game can't produce, such as entries dated in the future or two characters of one account fishing at the same time. If a check finds one, your Angler is left off the Leaderboards and Region firsts until the data changes or the Operator clears it. Its Angler page stays up. Only you see why, on your Angler page, and you can write to privacy@pagle.app with your Support code if you think a check is wrong. The Operator can also leave an Angler off by hand and tells you why. Being left off has no legal or similarly significant effect on you.
People who don't use Pagle
Pagle shows only characters their own Player verified. It imports no guild roster, friends list or other character list. If you think a character of yours appears on Pagle, write to privacy@pagle.app.
Copies and backups
When an Angler is unpublished or deleted, other Players' Pagle Companions drop it within 24 hours. Backups age out within 7 days of a Delete.
Last updated
Last updated: