The less we keep, the less there is to lose. That is the whole policy; the rest is detail.
Not your name, not your characters, not who you called. There is no advertising on this site, no analytics service, no tracking pixel, and no third party receiving your data. Selling it is not a line of business we want, and holding it is a risk we are not interested in carrying.
No part of this system records the audio of a call. Not member to member, not conference rooms, not pages. There is no recording feature to switch on by accident, because nothing in the call path can record.
Voicemail is the one exception, and an obvious one: a message somebody leaves for you is a recording, kept so you can play it back, and deleted when you delete it.
Only what it takes to put a phone number on a character and connect a call:
| Who you are | the identifier Battle.net gives us when you sign in, and your BattleTag. Never your password — Blizzard handles the sign-in and we never see it. |
|---|---|
| Your characters | name, realm, guild and rank, as the game already shows them to your guild. Nothing from outside the game. |
| Your line | your extension, and whether it rings, is set to do not disturb, or answers automatically. |
| Call status | whether a handset is registered and whether it is on a call — read live from the phone system when you load the page, not accumulated into a history of your habits. |
No email address. No payment details — there is nothing to pay for. No address, no telephone number of your own, no contact list, no message content, and nothing about what you do anywhere else.
The addon is distributed through CurseForge, and we count how many people follow that link from here, because CurseForge can tell us how many downloaded it but not how many came from us.
That count stores no identifiable data. Not your IP address: only the first three parts of it, which is enough to tell a dozen clicks from one network apart from a dozen different people, and not enough to point at anybody. We could have stored a scrambled version of the full address, and chose not to, because scrambling an address of that kind is reversible by anyone willing to try every one.
If you send a report, we keep what you typed, and — so that somebody can act on it — which of your lines exist and whether a handset was registered at the time. We do not keep your BattleTag with it.
Reports are copied into our private issue tracker. They are not public, and because we hold no email address for anybody, nobody can be contacted about one. That cuts both ways: no spam, and no reply.
Like every website and every telephone system, the servers keep short operational logs, and those do include the network address a request came from. They exist to find faults and to block the people who spend all day trying to break in. They are discarded on a timer measured in days, and they are not used to build any picture of you.
We are not going to publish a map of how this is defended, because the only people who benefit from that are the ones attacking it. What is reasonable to tell you:
Ask and it goes. There is no retention policy protecting our interests here, and no form to fill in.
This is a small, new service run by one person. It is not a company, there is no security team, and it has not been audited by anybody. Treat it as what it is: a telephone system for a game, built carefully, but new. Do not put anything through it that would hurt you if it leaked.
Last reviewed against the running system on 1 October 2026.