Privacy policy

• Your account: your username, email address, profile picture, verification status, and the information needed to keep you signed in and recover your account.
• Connected profiles: your Blizzard account ID, BattleTag, region, and profile claim when you choose to connect Blizzard or claim a player profile.
• Replays and statistics: uploaded replay files and match information such as BattleTags, players, heroes, talents, results, and game times.
• Your activity: comments and reports you submit. Reports are only visible to you and MercStats administrators.
• Security information: IP addresses, request and error details, and a protected browser identifier used to prevent abuse and follow replay uploads.
• Optional usage analytics: if you allow it, our site-delivery provider receives a broad page category and the names of selected buttons or links you use. We do not send searches, BattleTags, emails, report text, replay IDs, or URL query details with these events.
• Browser storage: the items described in our cookie policy.

We use account information to provide the features you request. We use replay data and limited security information because MercStats has a legitimate interest in providing useful community statistics and keeping the service safe. We ask for consent before using optional analytics or saving optional preferences in your browser.

Public pages can show usernames, published comments, BattleTags, player profiles, match participation, and replay statistics. Your email address, password, sign-in details, private reports, IP address, and browser identifier are not public.

A replay includes information about every player in that match. Only upload replays you are allowed to share. If you appear in a replay or profile, you can ask us to review or remove it.

We use trusted providers for site delivery, hosting, database storage, replay processing, optional usage analytics, and account email. These providers only receive the information needed to perform that service.

When you connect Blizzard, information is exchanged with Blizzard to complete that request. Links to other websites have their own privacy policies.

Some providers may process information outside Sweden or the European Economic Area. Where required, the provider uses approved safeguards for that transfer. We may also share information when the law requires it or when needed to protect users and the service.

• Sign-in sessions expire after 30 days. Email verification links expire after 24 hours, password reset links after one hour, and Blizzard connection attempts after ten minutes.
• Raw replays and identifiable match records are kept for the current game build and two previous builds, with a maximum of 12 months. Grouped statistics that no longer identify players may be kept longer.
• Your account, claims, comments, and reports are kept while they are active and only as long as reasonably needed afterwards for security, disputes, or legal duties.
• Security and error logs are kept only as long as needed. Deleted information may remain in protected backups until the provider's normal backup cycle ends.
• Optional analytics records are kept for up to 30 days. Your analytics choice is remembered for up to 12 months.

To ask for an earlier review or removal, email the MercStats page URL or replay ID to [email protected].

You can ask to access, correct, delete, restrict, or receive a copy of your personal data. You can object to uses based on legitimate interests and withdraw consent for future analytics and optional storage. You can also ask us to review a replay, public profile, or disputed profile claim.

Email [email protected] with your account email, the relevant page or replay ID, and what you want us to do. We may need to confirm your identity. We normally answer within one month.

You can complain to the Swedish Authority for Privacy Protection (IMY) or the data-protection authority where you live or work. Visit imy.se for contact and complaint information.

We protect information with access controls, encrypted connections, secured passwords and sign-in tokens, restricted administration, and isolated replay processing. Contact [email protected] if you think an account or personal record is at risk.

We will update this page when our data practices change. The date at the top shows the current version. MercStats is responsible for the personal data described here.