Privacy
Effective October 18, 2026
thott.bot gives your AI knowledge of World of Warcraft: Forever. To run it and make it better, we record what your AI asks us. We never see your conversation, we don't sell your data, and we don't use it to train AI models.
What we collect
What your AI asks thott.bot
When you connect thott.bot to ChatGPT, Claude or another app, your AI decides when to call our tools. For each call we record:
- what it asked: the search text it wrote, the entries it opened, and what it asked us to display. Your AI writes these itself, and they can include words from your question;
- what we answered: which entries we returned, in what order, how long the answer was, and any error;
- details your app sends with each call: its name and version, and identifiers or settings it attaches, such as a conversation ID, the AI model's name, your language or your approximate location;
- the country Cloudflare sees the request coming from, the time, and how long we took.
We don't receive your chat, your other messages or your AI's replies: only what it sends to thott.bot.
Your account and subscription
You sign in with Discord, Google or your email address. We keep that account's ID and the email address
it gives us (or your Discord username, if Discord has no verified email for you), or the email address you sign in
with. To sign in by
email, we send a code to that address. We keep the address with the code until you finish signing in, or delete
both within a day if you don't, and a one-way hash of the address for up to a day to limit how often codes are
sent. Stripe handles payment as the merchant of record:
your card details go to Stripe, never to us. We keep your Stripe customer and subscription IDs and whether your
subscription is active. If you use a beta code, we keep which code your account used and when. If you cancel and tell Stripe why, we keep your reason with the change. We count your
lookups to apply the Free plan's monthly limit and Unlimited's daily fair-use limit, and delete each count once
its month is over. When the Free plan's lookups for a month run out, we email the address you sign in with
(Google's or your own) once that month, to say when they come back and how to go Unlimited. That email has a link
to unsubscribe, and once you use it we note that on your account and send you only the sign-in codes you ask for.
Your account page keeps you signed in with a cookie for up to 30 days, until you sign out, and a second cookie
(thott-signed-in) only tells the home page that you are.
Connecting
We record each step of connecting: opening the sign-in page, choosing how to sign in, the plan you chose, and whether it finished, with the app you were connecting and your country. This shows us where people get stuck. While you choose a plan, a cookie holds your place in connecting for up to a day.
Where you came from
If you reach thott.bot from an ad or another site, the website saves a cookie, thott-ref, for 28 days. It holds the ad's click ID, its campaign tags, the site that sent
you and the page you landed on. When you first sign in, we keep it with your account so we know which channels
bring people who stay. We don't set this cookie for visitors in the European Union, the European Economic Area
or the United Kingdom.
The website
We count visits ourselves, with no cookies and nothing saved on your device. For each page you
open, we record the page or site you came from and any campaign tags in its address, your country, your screen's
width and whether it's a touch screen, your display mode, whether you're signed in, how long the page and each
part of it were on screen, what you clicked, and how quickly it loaded. Each page view stands alone: it isn't
linked to your account or to anything else you do. The site also keeps your display choices (color mode, layout, quest log) in cookies of its own
(thott-display, thott-layout, thott-quest), which only change how the page looks.
Security logs
Cloudflare processes your IP address to deliver thott.bot and block abuse, such as request limits. Our own error logs hold no questions and are kept up to 7 days.
How we use it
- To run thott.bot and your subscription.
- To improve it: we study what AIs search for to find questions we answer badly, and fix our search and our game data, and we study how people use the website to make it clearer.
- To learn which ads and sites bring people who subscribe. If you arrived from a Reddit, Meta or Google ad, we may tell that platform, from our server, that a subscription followed its ad's click, identified by the click ID.
- To keep the service secure and stop abuse.
We don't sell your information, show you ads, or use it to train AI models.
Who else handles it
- Cloudflare hosts thott.bot, stores our data and sends our sign-in emails. Its AI service turns each search into numbers to find matching entries.
- Stripe takes payments as merchant of record, under its own privacy policy.
- Discord and Google sign you in, under their own policies.
- Ad platforms receive only the conversion described above, and only if you came from their ad.
Your chat app (OpenAI, Anthropic or another) handles your conversation under its own policy. We disclose information only where the law requires it.
How long we keep it
- What your AI asks, the connecting steps and the website's page views: 90 days, then deleted automatically.
- Your account, subscription status and where you came from: while you have an account.
- What your AI asked, which entries we returned and how long the answer was, also kept without your account, conversation, country or time of day, dated only by the day: for good, so we can keep improving thott.bot.
Your choices
You can disconnect thott.bot in your chat app at any time, and delete your account on your account page. Email support@thott.bot to see a copy of your information, correct it, or delete your account. Deleting removes your account, where you came from and your usage records; Stripe keeps the payment records the law requires.
In the EU, EEA and UK we rely on our contract with you to run the service, and on our legitimate interests to improve it, measure where customers come from and keep it secure. You can object to that use, and you can complain to your data protection authority.
Everything else
thott.bot is not for children under 13. We store data in the United States and wherever Cloudflare runs. When this policy changes, we update this page and its date. Questions: support@thott.bot.