Impressum & Datenschutz
Imprint & Privacy
Who runs this site, how to reach us, and exactly what data it keeps.
Impressum Imprint
PD2 Waypoint is a private, non-commercial fan project for the Project Diablo 2 community, run by a private person in Germany in their spare time. There are no ads, no paid features, no sponsorships and no income of any kind.
This site is not affiliated with, endorsed or sponsored by Blizzard Entertainment or the Project Diablo 2 team. Diablo and Blizzard Entertainment are trademarks or registered trademarks of Blizzard Entertainment, Inc. Project Diablo 2 and all other names, trademarks and game assets belong to their respective owners and are used here only to describe the game.
Kontakt Contact
Contact: via the community Discord.
Datenschutzerklärung Privacy
This describes what the site's code actually does today. Questions or requests: see Contact above.
Verantwortlicher Who is responsible
The private operator of this site (see Contact above). The site runs on our own virtual server at the hosting provider Contabo in Germany. Data is not transferred to countries outside the EU, not sold, and not shared with anyone for advertising or analytics.
Besuch der Website Visiting the site
- No tracking. No analytics, no ads, no social-media plugins, no third-party scripts. Fonts, images and all other files are served from our own server, so your browser doesn't contact any third party while you browse.
- Server logs. Like every web server, ours technically processes your IP address, the time, the requested address and your browser's user agent to deliver pages and protect the site against abuse (Art. 6(1)(f) GDPR). These logs are only used for operation, troubleshooting and security, and are not combined with other data. The application does not keep its own log of visitors.
- External links. Links to other sites (e.g. the official Project Diablo 2 site, trade site or wiki) are plain links: nothing is sent to those sites until you click one, and their own privacy policies apply there.
Cookies & lokaler Speicher Cookies & local storage
Only technically necessary storage is used -- nothing for tracking, which is why there is no cookie banner.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
pd2w_sid | Cookie | Keeps you logged in (random session id, not readable by scripts). Only set when you log in. | Ends after 30 minutes of inactivity, at most 12 hours, or on logout |
pd2w_csrf | Cookie | Security token that protects logged-in actions against cross-site request forgery. Only while logged in. | Same as the session; removed on logout |
pd2wp_mode | Cookie | Remembers your Softcore / Hardcore choice for prices. Only set when you pick a mode. | 400 days |
pd2wp:tradeIsHardcore | Local storage | The same Softcore / Hardcore choice (older storage format). | Until you clear it |
pd2wp:ownerToken | Local storage | Random id that lets you keep editing builds you created in the Planner without an account. | Until you clear it |
pd2w.scroll.v1 | Session storage | Scroll positions, so Back returns you to the same spot. | Until the tab is closed |
Benutzerkonto Accounts
An account is optional; everything except creating content can be used without one. If you create one, we store (Art. 6(1)(b) GDPR):
- your e-mail address and a password hash (Argon2 -- the password itself is never stored), the time you confirmed you are at least 16, and whether your e-mail is verified;
- your display name and anything you add to your profile (bio, self-declared PD2 account / character names, profile privacy setting), optional two-factor (TOTP) settings;
- your login sessions (creation / last activity / expiry and a salted hash of your IP address -- not the address itself) and a failed-login counter used for lockout;
- what you create or do on the site: builds, guides, comments, ratings, favorites, follows, linked characters, character update requests, notifications and reports.
Sign-up protection uses ALTCHA, a proof-of-work check computed in your browser and verified by our own server -- no third-party captcha service (no Google, no hCaptcha) is involved. Login and sign-up attempts are rate-limited using a salted hash of your IP address held only in the server's memory.
E-mail: the site currently does not deliver e-mail through any mail provider. Verification and password-reset messages (your address and the link) are written to the server log instead.
Moderation: comments and reports are also passed to our own moderation tool (operated by us, not a third party) for spam and word-filter checks.
Spieldaten Game data shown on the site
Character, ladder and market pages are built from data Project Diablo 2 publishes publicly (ladder, character armory and trade listings): character names, class, level, skills and gear. Market prices are shown only as aggregated statistics. If you want a character of yours removed from this site, contact us.
Speicherdauer & Löschung Retention & deletion
- Account data is kept until you delete your account. Login sessions expire on their own (see the cookie table).
- You can delete your account at any time on the Account page ("Delete my account"). This removes your account, e-mail address, profile, sessions, ratings, favorites, follows, character links, notifications and private builds. You choose whether your shared builds are deleted or kept anonymised (shown as "deleted user"). Comments stay visible but are re-attributed to "deleted user"; guides you wrote stay without a link to your account.
- You can download everything stored about your account as a JSON file on the same page ("Download my data").
Deine Rechte Your rights
Under the GDPR you have the right to access your data (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20) and to object to processing based on legitimate interests (Art. 21). Most of this you can do yourself on the Account page; for anything else, contact us. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), for example the one where you live.