Privacy Policy
Last updated 21 July 2026 · ProfitProphet is operated by Deadpan Labs LLC (Florida, USA).
The short version. The addon collects nothing and sends nothing — it has no network
access and never talks to us. Wisdom (the website) only holds what you deliberately give
it: how you sign in, the auction scans you choose to upload, and your own private ledger. We
never see your password or your card details. We don't sell your data or run advertising.
1. The addon collects nothing
The ProfitProphet addon runs entirely inside World of Warcraft and saves its data to a file on
your own computer. WoW addons have no network access, so the addon cannot — and does not —
transmit anything anywhere. If you never create a Wisdom account, we hold no data about you at
all.
2. What Wisdom collects
Everything below is either something you enter, or something you explicitly choose to upload.
| Data | Why | When |
|---|
| Account identity — either your Discord username, avatar and account ID, or your email address |
To create your account and sign you in |
You sign up |
| Auction scan data — item names, prices and quantities, plus the realm, faction and game version |
Pooled with other players' scans to build the market boards — the point of the product. Also used, aggregated and anonymised, to develop and train the models behind trends, liquidity, craft costing and buy/sell signals (see §2a). |
Only when you run the uploader or paste an export |
| Your ledger — your in-game sales and purchases |
To show your profit/loss across devices. Private to you — never pooled, never shown to anyone else. |
Only if you use the desktop uploader |
| Preferences — home realm, game version, watchlist, item groups |
To personalise your boards |
You set them |
| Discord webhook URL (optional) |
To send you price alerts, if you turn them on |
You paste one in |
| Billing linkage — a Stripe customer ID and subscription status |
To know whether your subscription is active |
You subscribe |
2a. Using market data to improve and train our technology
Contributed auction scans are used, in aggregated and anonymised form, to develop, train,
evaluate and improve the technology behind Wisdom — the statistical and machine-learning models
that produce price trends, liquidity estimates, craft costing and buy/sell signals. In plain
terms: your scans help teach the system what a normal price looks like, so it can tell everyone
when something isn't normal.
- Market scan data only. Item prices, quantities, realm, faction and game version.
- Your private ledger is never used for this — not aggregated, not anonymised, not at
all. It is only ever shown back to you.
- Not tied to you. This use is of pooled figures, not of you as an identifiable person,
and nothing derived from it identifies which player contributed which scan.
- It can outlive your account. Because the data is aggregated, deleting your account
removes your personal data but cannot retroactively remove your scans' influence on a
historical median or an already-trained model. We'd rather say that plainly than imply a
deletion guarantee we can't honour.
- Contributing is optional. If you never upload, none of this applies to you — and
Wisdom still works.
What we never have
- Your password. Authentication is handled by Supabase Auth; passwords are hashed by them and never reach us in a readable form. If you sign in with Discord, there is no password at all.
- Your card details. Payments run entirely through Stripe's own hosted checkout and billing portal. Card numbers never touch our systems.
- Your WoW account credentials. We never ask for them and could not use them. We are not affiliated with Blizzard Entertainment.
3. Who else processes it
We use a small number of established providers. We don't sell data, and there is no advertising or ad-tracking anywhere on this site.
| Provider | Role |
|---|
| Supabase | Database and authentication |
| Vercel | Website hosting; privacy-friendly aggregate analytics (no cookies, no cross-site tracking) |
| Stripe | Payments and subscription management |
| Resend | Sends account emails (confirmation, password reset) |
| Discord | Optional sign-in, and delivery of price alerts if you enable them |
4. How it's protected
- Every table enforces row-level security, so your account data, ledger and upload keys are readable only by you. This is enforced by the database itself, not just the app.
- Your ledger is strictly owner-only — no other user can read it under any circumstance.
- Upload keys are stored only as hashes; the key itself is shown to you once and never again.
- Pooled market data is published as aggregates (daily medians, trends, contributor counts) — never as individual listings attributed to a player.
- We run periodic security audits, including active testing that one account cannot reach another's data.
5. How long it's kept
- Raw uploaded scans are deleted after 7 days. Only the aggregated daily figures derived from them are kept long-term.
- Account data, ledger, groups and preferences are kept while your account exists.
- Billing records are retained by Stripe as their own regulations require.
6. Your choices
- Don't contribute. Uploading scans is entirely optional — the product works without it.
- Revoke upload keys at any time from your portal.
- Turn off alerts or remove your webhook URL at any time.
- Cancel your subscription yourself from the portal — no email required.
- Delete your account. Email us and we'll delete your account, your ledger and your personal data. Aggregated market figures that no longer identify you may remain, since they're pooled across contributors and already used in trained models — see §2a.
- Access a copy of your data by asking us.
Depending on where you live you may have additional rights (access, correction, deletion, portability, objection). We'll honour them — just ask.
7. Children
Wisdom isn't directed at children under 13, and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll remove it.
8. Changes
If we change this policy materially we'll update the date above and, for significant changes affecting your data, notify signed-in users.
9. Contact
Questions, deletion requests or anything else: pablo@deadpanlabs.com, or the Discord.