Privacy
Reading Zephras needs no account and sets no cookies. This page covers how visits are counted and what happens when you comment or upload.
When you visit
Zephras counts visits to learn which pages are read and what is missing. Each page you open sends the page's address and the name of the site that linked you to it, if any. A search that finds nothing sends the search words, and a click on a download link says which download. Zephras adds these up per day, with the country Cloudflare reports for the visit. It keeps only the daily totals: no cookies, no IP address, no visitor ID, and nothing that links a visit to you or to your account.
When you sign in
You sign in with Battle.net. Zephras receives your Battle.net account ID and BattleTag, and nothing else. Comments show only the name part of your BattleTag; the number stays private. A sign-in cookie keeps you signed in for 30 days or until you sign out.
When you post a comment
Zephras stores the comment text, the record it belongs to, the game build, the time, and the result of each check. Your IP address is stored only as a salted hash and deleted after 30 days. It is used to spot abuse.
To stop spam and abuse, these services see the comment:
- Cloudflare Turnstile
- Cloudflare Workers AI
- Groq
- OpenRouter (backup)
None of these services receives your name, account ID, or IP address from Zephras, except that Turnstile sees your connection as any website does.
When you upload a file
Zephras stores the file exactly as sent and links it to your account. The file holds what the addon recorded: the NPCs you targeted, the zone, where your character stood, the game build, and the times. From addon version 1.1.1 on it never records other players or pets. Versions up to 1.1.0 noted whoever you had targeted when the zone changed, players and pets included; Zephras removes those names before it stores the rows and never publishes them, and the file as sent is kept only as evidence of the upload. Your account and your position are never shown on the site; published records show only what the file says about each NPC, such as its name, level, and when it was seen. Where your character stood while you targeted an NPC helps work out where that NPC stands. Only the NPC's position is published, never yours, and only after several players' readings agree.
Game cache (optional): while "Share quest and NPC cache" is ticked in the uploader (it is on until you untick it), it also sends three files the game keeps in its Cache folder: what the game server sent your client about quests (text, objectives, rewards), NPCs (names, titles, models), and objects (names). They hold no account, character, chat, or position data. Zephras stores them as sent, linked to your account, accepts them like any other upload (below), and publishes a quest or NPC only when another independent player sent the same data, or a trusted player did.
From addon version 0.9 on, the file also records the NPC windows you open (vendors, trainers, flight masters, quest givers) with where your character stood, what NPCs say near you, what you loot and how it was opened, your fishing casts, your kills with the experience and reputation they gave, the NPCs whose nameplates you saw, and your character's level, class, race, and faction. It never records your character's name: where an NPC says it, the file writes $N instead.
From addon version 1.5.0 on, the addon also asks the game server about quests Zephras has no text for, one at a time while you stand still (you can turn this off in its panel). The answers land in the game's quest cache described above. The file then also holds counts for each play session (quests asked, answered, refused, and when) and the numbers of the quests the server refused, so Zephras can tell which quests no player can load. They say nothing about you or your character.
Before you upload, the uploader (from version 0.10.0) shows what your new entries add for you and for Zephras. To work that out it sends Zephras only the ID numbers of the NPCs, quests, bosses, and chests and nodes in your new entries, the names of their zones, and the ID of your copy of the addon, never the file. Zephras compares them with your accepted uploads and everyone's, answers with counts, and stores nothing.
Every file is checked when it arrives. Your first file waits for a person. After a person has accepted one of your files, a clean file from your account is accepted automatically; a file the checks question, and one in twenty clean files, waits for a person. Accepted is not yet published: a record appears at the next morning's update once a trusted player or two players agree. Your uploads and their review state are listed on your account page.
When you send feedback
From the feedback page, Zephras stores your message, the contact details you choose to give, the page you came from, your browser family (for example Firefox), and whether you were signed in. Turnstile checks that a person is sending. To stop abuse, Zephras keeps a salted hash of your network address and browser family for its daily limits; the address itself is never stored.
From the uploader, Zephras stores your message with the uploader version, the game build, and the fingerprint of your last upload, linked to your account. A note you save in the addon's Zephras panel travels inside your next upload with the zone, your character's position, and the NPC you had targeted.
Feedback goes privately to the people who run Zephras, as an entry in a private issue tracker on GitHub; it is never published. An automatic check may send the message text, without your contact details, to OpenRouter to sort out spam. Deleting your account removes the contact details you gave with feedback.
When you rate the design
Zephras is trying a new design at new.zephras.com beside the current one, and every page of both carries a rating box. Sending a rating stores the score, the comment you choose to write, the page you were on, your browser family, and which design you rated. To count one person once per design per day (a second rating that day replaces the first), Zephras keeps a salted hash of your network address and browser family; the address itself is never stored, no cookie is set, and a rating is never linked to an account, even when you are signed in.
Linked logins and fair counting
You can link up to 4 Battle.net logins to one Zephras account. Only you see the full BattleTags of your linked logins.
Zephras publishes a sighting only when independent players confirm it. To tell players apart, it keeps, for 30 days, a salted hash of the network address you sign in and upload from, and a hash of your Zephras addon's install id. These cannot be turned back into an address. They are used only to stop one person from posing as several, never shown on the site, and deleted after 30 days.
You can delete your account on your account page. That deletes your account information: linked logins and BattleTags, sign-ins, connected uploaders, and fingerprints. Uploads and comments that are already published stay, shown as written by Deleted player.
Review and your comments
A person reviews flagged comments and every new author's first comments. When a comment is rejected or removed, you can see the reason while signed in. Published comments are public until removed.