Loading data
Please wait while the page loads.
Version 2026-10-15.informative-8 · public information preview · channel connection activation pending
This notice covers public page visits, updates you choose to save on your device, public chat when enabled, email requests and the optional channel connections described below. Public channel connections remain closed pending activation.
Public Twitch and YouTube connections are currently closed. The following sections describe the optional connections when offered in your signed-in Forever Pulse account. Linking a channel is separate from signing in, publishing a channel, proving control of a WoW character or identifying a live stream. You may use the other available account features without linking either provider. The protected STAGING tests have their own notice.
At your request, Forever Pulse obtains your Twitch account identifier and channel name and associates them with your existing Forever Pulse account, together with verification dates. It requests no email permission. Access and refresh tokens are encrypted on the server and used to recheck authorization and channel information. The association is shown to you in your account. If your account has claimed a game character, your Twitch channel name, its link and its public live status are shown with that character on its public sheet and in the site's tables, and your channel is listed in the public Creators directory with that character, under its Twitch display name and the broadcast language set on Twitch (read with the site's application access); unlink Twitch or release the character to stop this. The connection does not change your Twitch content. Twitch handles your authorization under its own privacy policy at https://www.twitch.tv/p/en/legal/privacy-notice/. Enter your Twitch password only at Twitch.
Forever Pulse uses YouTube API Services. With your agreement to this privacy notice and the YouTube Terms of Service, followed by your authorization at Google, it requests only https://www.googleapis.com/auth/youtube.readonly. It reads the identifier and title of the YouTube channel associated with the account you select at Google and stores them with your Forever Pulse account and verification dates. If no channel or an ambiguous result is returned, it does not guess a channel from a name or URL.
Google access and refresh tokens are encrypted on the server to recheck authorization and channel information. They are not included in the browser's account data. This feature does not collect your Google email, videos, subscriber lists or viewing history, upload or edit content, or publish your channel association. Enter your Google password only at Google. Google's processing follows its Privacy Policy at https://policies.google.com/privacy; YouTube API Services are subject to https://www.youtube.com/t/terms.
Vercel hosts the application and Supabase stores the channel information and encrypted credentials. These service providers process the data needed to operate the requested connection. Infrastructure, subprocessors and support may involve Switzerland, the European Union, the United States and other countries under the providers' applicable agreements and transfer safeguards. This is not a promise that all processing remains in one country. Provider authorization requests go to the provider you choose, Twitch or Google; channel checks and token refreshes run on Forever Pulse's server.
Channel data is used only to provide and secure this optional account connection. It is not sold, used for advertising or audience profiling, or used to train AI models. Apart from the Twitch channel shown with a claimed character as described above, it is not shared with other site visitors; YouTube channel details are not published. Human access to Google API data is limited to specific data you affirmatively authorize us to inspect, necessary security investigation or applicable legal obligations. Use and transfer of Google API data must follow the Google API Services User Data Policy, including its Limited Use requirements, at https://developers.google.com/terms/api-services-user-data-policy. Contact foreverpulsesupport@gmail.com with questions or privacy requests; do not send passwords, OAuth codes or tokens.
Authorization and channel information are checked periodically. Unavailable verification hides the channel information; a YouTube verification older than sixty minutes is also hidden. YouTube channel details are deleted before thirty days without successful verification. A definitive authorization refusal removes the association. These deadlines require the scheduled processing and monitoring qualified before a connection opens; an outage is not a successful verification.
Use Unlink in your account to remove the local channel information and request revocation at the provider. Account deletion also removes channel information and requests revocation. A recent sign-in may be required to protect these actions; unlinking does not require accepting a new privacy notice. If revocation cannot be confirmed immediately, the interface reports it as pending and the service retries. Minimal encrypted Google cleanup credentials remain for at most six days; their deletion at that deadline is an incident, not confirmation that Google revoked access. A minimal encrypted Twitch access token is kept for revocation retries until revocation is confirmed or its expiration is processed.
You can independently withdraw Google's authorization through https://security.google.com/settings/security/permissions or https://myaccount.google.com/permissions, and Twitch authorization through https://www.twitch.tv/settings/connections. Periodic checks detect authorizations that can no longer be refreshed and remove the association. YouTube details are deleted within the thirty-day limit described above even if authorization checks remain unavailable. Provider withdrawal and local unlinking are distinct actions. Application deletion does not promise immediate removal from provider backups or restoration of a connection after data loss; a restore must not reinstate a withdrawn authorization.
Everyone can read and send public site-chat messages without an account. Sending stores the message, room, time and a random visitor identifier in the site's Supabase database. Only the message, room, time and shortened Guest name are published. A Guest name is not verified identity or a game character. The chat module does not store your IP address or connect your messages to an account. Hosting still receives connection information as described below. Do not post private or sensitive information.
Messages older than seven days are excluded from public reads. A later valid send removes expired rows and trims the chat to its latest 5000 stored messages; no automatic physical deletion during inactivity or removal from provider backups is promised. To request removal or report a message, use its Report message link or email the support address with its message ID and the requested action. The publisher can hide messages; no permanent archive or recovery guarantee is offered. Other statements below about closed services refer to services outside this public chat.
Whispers, when available, are messages between two chat visitors. Sending one stores the message, the time and the random visitor identifiers of the sender and the recipient in the same database. On the site only these two visitors can read it, and each sees the other's shortened Guest name. Whispers are not end-to-end encrypted: the publisher can read a whisper to handle a report or a legal obligation, and can hide it. Whispers older than seven days are excluded from reads; a later valid whisper removes expired rows and trims storage to the latest 20000 whispers, with the same limits on physical deletion and backups as public messages. Announcements are written by the publisher only and contain no visitor data.
Guillaume Picon, Avenue de Rossfeld 31, 3960 Sierre, Switzerland, controls Forever Pulse's own processing. Contact foreverpulsesupport@gmail.com. Connection information is used to deliver the requested pages, diagnose failures and protect the service. Necessary, limited delivery and security processing serves the legitimate interests of running a secure information site where that legal basis applies; Swiss data protection requirements also apply within their scope. No profiling, audience measurement, advertising or player collection is enabled.
Your browser sends Vercel your IP address, requested URL, time, browser/device headers and delivery or security metadata. Do not place private information in URL queries. Game icons (faction banners, class, race and statistic icons) are loaded by your browser from wow.zamimg.com, the Wowhead image server run by ZAM Network: your browser therefore sends that host your IP address and its request headers, without a Referer (no-referrer policy). Only these images come from that host: no script is loaded from it and Forever Pulse sets no cookie for it. The application does not deliberately log request bodies, email codes, credentials or player records. Vercel processes hosted customer data under its Pro Data Processing Addendum, and some service-generated/security data under its own Privacy Notice. Infrastructure and support can involve the United States and other locations used by Vercel and its subprocessors. Its DPA includes international-transfer safeguards and Swiss provisions; this is not a claim that all data remain in one country.
The standard Pro runtime-log window is one day according to Vercel's documentation. This is not a blanket one-day promise for every security, account, legal or provider-held record. Provider security and legal retention follow their applicable notices and obligations. Apart from the public chat described above when enabled, this preview adds no application database of visitor activity and no external log export. The project may use the available limited logs to diagnose an incident; it does not publish them.
When the home page or the Streams page shows streams of the World of Warcraft category on Twitch, your browser loads their thumbnail images directly from Twitch's image server (static-cdn.jtvnw.net). Twitch then receives your IP address, the image address, the time and browser headers under its own privacy notice; no Referer is sent, and this site loads no Twitch cookie, script, player or frame. The list of streams is read by the site's server with an application token, sends no visitor data to Twitch and is kept only in a short server cache, without a database; audience figures are discarded.
Published competition history is kept without a deletion deadline: World First records, tournament results and winners, rankings, placements and the hall of fame are not purged by any retention timer. They show game character names, realms, guilds, dates and results as published by their source or transcribed by the publisher. If you want a character name removed from this history, email the support address: the entry is anonymized, and its place, date and result stay in the record unless the law requires full removal. Live data shown next to an entry, such as a current level or guild, keeps its own shorter retention.
If you press Save update, this browser stores only the identifiers of up to 25 updates in forever-pulse:home-favorites:v1. They stay on this device and have no automatic expiry. Remove an update, use Clear saved updates on the cookies page, or clear site data. Saving is your specific request; merely visiting does not create a saved-update entry or consent to another purpose.
Email is handled separately by the publisher through Gmail/Google. It includes your address, message and only the material you choose to send. It is used to respond to and document your request, not for marketing. Google infrastructure and support can involve the United States and other countries under its applicable privacy and transfer provisions. Do not send sensitive attachments, passwords, tokens or unrelated personal information. Keep only what is needed for handling, rights, security or a documented legal obligation, review the need when the case closes, and remove unnecessary material. No automatic mailbox purge or fixed deletion guarantee is claimed.
You may ask for access, correction, deletion, objection or restriction as applicable, without a site account. Identify the information and requested action using the least data needed. Additional identity evidence should be requested only when necessary. Swiss access requests normally receive a response within 30 days; where the GDPR applies its normal response period is one month, with a reasoned extension where permitted. A refusal must explain its grounds and available remedies. You may contact the FDPIC or another competent authority without first exhausting an internal complaint.
The optional channel connections described above remain closed on the public site pending their separate review and activation. Their proposed processing does not extend to other account services, game-data collection, submissions or competitions. Those services have their own availability and information requirements; no exemption or EU representative for them is asserted here. Vercel's delivery/security processing, public chat and voluntary email remain distinct.