WandrealmPrivacy
Last updated 27 September 2026
Who we are
Wandrealm is a free, fan-made co-op mod for Hogwarts Legacy. This page explains what personal data the Wandrealm website, the launcher and our servers use, why, and what your rights are. The person who runs Wandrealm is responsible for your data (the "controller" in data protection law). You can reach us at hello@wandrealm.com.
What we collect
- Your account: your email address, the first and last name you give when you sign up and your password, which our sign-in service stores only in a scrambled form (a hash) that cannot be turned back into the password. If you sign in with Discord, Discord shares your Discord id, user name and email address with our sign-in service when you allow it.
- Your username: the name you choose once, just after you sign up. It is how other players know you, and it is also a name you can sign in with.
- Your player record: an id for your account and your username.
- Your character: when you bring a character across with the launcher, we keep a copy of that character's save on our servers, including its name, house, level, knuts and experience. We keep some earlier versions so we can put your character back if something goes wrong.
- Your realms: the realms you create or join, their names, who is in them, and when you play in them.
- Early access: if you tick "Email me when the launcher is ready", we keep that choice, when you made it, and your account's email address.
- Technical data: to keep the service running and safe, our servers note requests as they happen (the time, what was asked and whether it worked), and briefly hold the internet address a request comes from, for example to limit how many invite links can be opened from one place.
Why we use it
- To give you the service you signed up for: your account, your character and your realms. The legal basis is our agreement with you (Article 6(1)(b) GDPR).
- To email you when the launcher is ready, only if you ticked the box. The legal basis is your consent (Article 6(1)(a) GDPR). You can take it back at any time by unticking the box on the Play page or by writing to us.
- To keep Wandrealm safe and working, for example to stop abuse and to find faults. The legal basis is our legitimate interest in a service that works and is safe for everyone (Article 6(1)(f) GDPR).
We do not sell your data, and we do not use it for advertising or analytics.
Who else sees it
- Playing together: Players in the same realm see your username, your character's name, level and appearance while you play together, and the realms you share with them. On the website, a realm's owner can see every member's username, and members can see the owner's username, at any time, not only while playing together.
- Public realms: If you make your realm public, its name and your username are listed for everyone, including people who are not signed in.
- Invite links: Anyone who has an invite link can see the realm's name, its owner's username, how many players are online and how many members it has.
- Our hosting: the website, our sign-in service and our database run on a dedicated server we rent in Europe. The company we rent it from stores the data for us and may not use it for anything else.
- Email delivery: emails from our sign-in service, such as confirming your address, go out through an email delivery service that sends them on our behalf.
- Discord, only if you choose to sign in with it. Discord is based in the United States and handles your data under its own privacy policy.
Other players never see your email address or the first and last name you gave when you signed up.
Cookies
The website uses only the cookies signing in needs. There are no analytics or advertising cookies, so there is nothing to accept or refuse.
| Cookie | What it does | How long |
|---|---|---|
wandrealm_access_token | Keeps you signed in: it proves to our servers who you are. | 7 days |
wandrealm_id_token | Lets you sign out of the sign-in service too. | 7 days |
wandrealm_pkce_verifier | Protects a sign-in while it is in progress. | 10 minutes |
wandrealm_oauth_state | Protects a sign-in while it is in progress. | 10 minutes |
wandrealm_return_to | Brings you back to the page you were on, such as an invite, after signing in. | 1 hour |
wandrealm_signin_retry | Stops the website sending you round in circles if signing in cannot work. | 30 seconds |
wandrealm_rename | Protects the change to your username while it is in progress. | 10 minutes |
Our sign-in pages, on the auth address of this site, set their own cookies to remember that you are signed in.
How long we keep it
- Your account, player record and realms: while your account exists.
- Your character: your 20 newest versions, the version you brought across, and for the last 30 days one version from each day and from each of your 10 most recent play sessions, while your account exists. Older versions are deleted.
- Your early-access choice and email address: until you untick the box or delete your account.
- Technical data: only as long as we need it to run and protect the service.
Your rights
You can ask us for a copy of your data, to correct it, to delete it (which closes your account), to limit how we use it, to receive it in a portable form, or object to how we use it. Where we rely on your consent, you can take it back at any time. Write to hello@wandrealm.com; we answer within one month. You can also complain to the data protection authority where you live.
Age
You need to be at least 16 years old to create a Wandrealm account.
Changes
If we change this page, we update the date at the top. If a change matters for how we use your data, we will tell you on the website before it takes effect.