Privacy Policy

Who we are

WhoaDB is an unofficial, non-commercial fan companion site for the mobile game Whoa Adventure. It has no advertising, no accounts, and no user profiles. This policy covers the whole site, including the build-sharing feature at /builds.

What we collect

The site itself collects almost nothing. The one exception: when you submit a build, we record the IP address your request came from, purely to enforce a rate limit (currently 5 submissions per hour per IP) against spam and abuse. That IP is stored in a separate collection from the build itself, is never shown to anyone, and is automatically deleted one hour after it's recorded — we don't choose to delete it, the database does it on a fixed schedule we can't override.

A build you submit (its title, class, scenario tags, and the equipment/talent/etc. selections that make it up) is kept indefinitely, since that's the actual content of the page — but it contains nothing that identifies you.

If you use the build planner without submitting anything, your in-progress draft is saved only in your own browser's local storage, never sent to us until you choose to submit it.

Why we're allowed to do this (legal basis)

Recording a submission's IP address for an hour is processing based on our legitimate interest (GDPR Article 6(1)(f)) in preventing spam and abuse of the build-sharing feature — the shortest retention that still makes the rate limit work.

Cookies

WhoaDB does not set any cookies. If we ever add analytics, it will be a cookieless, privacy-respecting tool (no cross-site tracking, no consent banner needed) — this policy will be updated first.

Who else sees data

The site runs on third-party infrastructure that processes data on our behalf: a hosting provider (Vercel) and a database provider (MongoDB Atlas). Neither uses site data for their own purposes. We host in EU regions where the provider offers one.

Children

WhoaDB is not directed at, and does not knowingly collect data from, children under 16.

Your rights

Under GDPR you can ask what we hold about you, ask us to correct or delete it, or object to our processing. In practice, since we don't run accounts and only ever hold a submission IP for an hour, there's rarely anything to find by the time you ask — but write to contact@whoadb.com and we'll confirm one way or the other.

Changes

We'll update this page if what we collect changes, and update the date at the top when we do.

Contact

Questions about this policy, or a request about your data: contact@whoadb.com.