Privacy - Wipe to Win

Updated on October 30, 2026. No account, and your log files are never sent: only the result of their analysis goes to the server, and you can turn that off. The only cookies are your Battle.net login's, if you log in, and those of Google's ads.

What Wipe to Win reads

The WoWCombatLog-….txt files in the folder you choose. They contain the names of the characters in your group, their realm, their game IDs and everything that happened in combat. Your browser reads them on your disk; the page only gets access with your consent, read-only, and only to the chosen folder.

What Wipe to Win keeps, in your browser

The result of each log's analysis, so it doesn't have to be reread at every visit.
Your display preferences (language included), the specializations you corrected by hand, where you stopped each replay and, when logged in, your BattleTag, to show it without waiting for the server.
The icon names and key timers already fetched.
The links of the runs you shared, so you can change how long they last or stop them.

All of this stays in your browser's local storage, on your machine. Nobody else has access to it, not even the site's publisher.

What goes to the Wipe to Win server

Your analyzed runs, without you having to click: after each analysis, and once for those already kept in your browser, the result of each run's analysis (place, outcome, duration, names, realms and game IDs of the group's characters, how the fight went, in-game positions) goes to the server with your audience ID, never the log file. A run is only sent again if its log has grown. It is erased 13 months after it was sent. You can turn sending off in the analyzer's Storage: your next runs then stay in your browser, and those already sent stay online until they expire.
Your Battle.net account, if you log in (the analyzer's “Log in” button): Battle.net asks for your consent, then the server receives your account ID, your BattleTag and the list of your characters (name, realm, region), and links this browser and its sent runs to it. Your runs sent from your other devices are then downloaded into this browser. The Battle.net token is only used to log in and is not kept; a session cookie (wtw_session) keeps you logged in for a year. Logging out removes the runs that came from elsewhere from this browser. Your account is erased 13 months after your last logged-in visit.
Your runs shared with a friend (the analyzer's “Friends” tab, logged in to Battle.net): the server keeps who you share them with (an account, picked by BattleTag or by a character of your guild, or a whole guild), what you share (Mythic+, raid, chosen dungeons, key levels or bosses) and each answer. A friend who accepts reads those of your sent runs that fit this share, including the names of the group's characters; they see your BattleTag and your most played character, or the one you pick (the server keeps that choice). To find your guilds, the server asks Blizzard for the public profile of your Progress characters, then the member list of their guild (already public), read again every 6 hours while a share targets the guild. A member of your guild only shows up in your choice if they are logged in to Wipe to Win, by their character, never by their BattleTag. The server remembers when you saw each friend's runs, to point out those sent since. Stopping a share deletes it right away; everything is deleted with your account.
A shared run: when you click “Share”, the result of that run's analysis (character names and realms, the course of the fight, and the in-game positions used by the replay) is sent, never the log file. Anyone with the link can open it. It's kept for 30 days; you can then pick 1, 7 or 30 days, or no limit, and stop it at any time with “Stop sharing”: it's then deleted right away. With no limit, it's deleted if nobody opens it for 6 months. If you rescan its log, the new analysis replaces the old one, at the same link. Pasted into Discord, an e-mail or a social network, the link shows a preview (place, outcome, duration, deaths, character names) that those services may keep in cache after removal.
A contact message: your message, plus your nickname and e-mail if you give them. It's deleted after one year. Your IP address isn't kept.
Feedback (Poukey's bubble, at the bottom right of every page): its type (suggestion, bug, other), your message, your Discord name if you give it, the address of the open page, the site language and the link of any runs you attach (each shared as with “Share”). The server doesn't keep it: it passes it straight to the site's editor as a private message on Discord, which keeps it like any message. Until you send it, your draft stays in the tab.

This data is hosted in France by OVH and is only used to display the shared run, to answer you and, for your sent runs, to improve the site's analyses. It is neither sold nor passed on; only feedback goes through Discord.

The online visitor count: while a page of the site is open, your browser keeps a connection to the server, without sending anything, for the number shown at the bottom of the page. Logged in to Battle.net, your session cookie goes with it: the server tells you right away about an invitation from a friend. Several tabs count as one. Nothing is recorded: the total lives in memory and drops as soon as you leave.

Audience measurement: your browser draws a random identifier, keeps it, and sends it to the server once a day, then after each analysis with the number of newly analyzed runs (M+ or raid). Nothing else: no log, no character name, no run content, and your IP address is not kept. The same ID comes with your sent runs (above), whose sending can only be turned off in Storage. The server also counts the shares created each day. Only the site's publisher sees these figures: per day (visitors, returning visitors, analyzed runs) and per identifier (days visited, analyzed runs). If you give them your identifier, they can put your name on it; otherwise you stay unknown. Each visit is erased after 13 months, and that name with the last one. Erasing the site's data gives you a new identifier.

What goes to other sites

Wowhead (nether.wowhead.com, wow.zamimg.com): the IDs of the spells shown, and those of characters' items when a run opens (with enchants and gems), to get their icons, names, sockets and tooltips, the map ID of the replayed dungeon, to display its layout, and, in the replay, the ID of bosses (for their Dungeon Journal portrait), of enemies you hover on the scene (for their name) and of enemies' appearance (for their thumbnail). On the guide pages, the icons of spells, classes and specs, and the thumbnail of each dungeon's enemies. No player name, no log excerpt.
Blizzard (render.worldofwarcraft.com): when a key's report opens, at the end of a replay and when you follow a player in it, the address of the 3D render or portrait of each character involved, computed from the log (the region, the realm and the character's number). In the Friends tab, the crest images of a shared guild, the same for everyone. It's the only request that carries anything about your characters, and it only goes to Blizzard, which already hosts them. No log excerpt.
Raider.io (raider.io): one request for the list of dungeons and their time limit, with nothing about you or your runs.
Google AdSense (pagead2.googlesyndication.com and Google domains): the ads that fund the site, on the site's pages, never in the analyzer. Google sets cookies and may personalize ads if you accept it in the consent banner; you can change your mind from that banner. AdSense receives neither your logs nor your characters' names. See how Google uses this data.
The site's host, which serves the pages like any website.

As with any web page, these services see your IP address and browser at the time of the request. Their own privacy policies apply.

Your rights

The button above erases what your browser kept and stops your shares; clearing the site's data in your browser settings has the same effect. For your sent runs (give your audience ID), a shared run or a message kept on the server (including a run where your character appears, shared by someone else), request their deletion through the contact form. If you feel your rights aren't respected, you can file a complaint with the CNIL, the French data protection authority: cnil.fr.