01

Controller and contact

The controller for the processing described in this policy is the operator of LW-Tools, available at lw-tools.com.

For privacy questions or to exercise your rights, contact:

support@lw-tools.com

02

Data we process

Website access, security and diagnostics

When you access LW-Tools, the web infrastructure processes technical request data such as IP address, date and time, requested path, referrer, browser or device information and security events. This is necessary to deliver the site, prevent abuse and investigate failures.

The legal basis is our legitimate interest in operating a secure and reliable service (Article 6(1)(f) GDPR).

Accounts and alliance workspaces

If you create an account, LW-Tools processes your username, display name, password hash, protected safety word, optional email address, optional avatar, account settings and authentication data. If you join or create an alliance workspace, we also process roles, memberships, schedules, events, assignments, notes and other content entered by workspace members.

This processing is necessary to provide the requested account and workspace features (Article 6(1)(b) GDPR). Security and audit records are additionally processed on the basis of our legitimate interests (Article 6(1)(f) GDPR).

Optional device notifications

When you enable device notifications, LW-Tools stores your browser’s push endpoint, encryption keys, account identifier and selected notification categories. Encrypted notifications travel through the push service provided by your browser vendor (such as Apple, Google, Mozilla or Microsoft). The lock-screen notification contains a general update notice; private message text remains inside LW-Tools.

You can turn notifications off for this device under the bell’s Settings tab or in your browser permissions. Signing out disconnects this browser. Inactive device registrations expire after 90 days. Scan completion, scan failure and coin refunds are off by default for device notifications. You can opt into each action separately; their in-app history remains silent.

Linked game accounts and server intelligence

If you link a Last War commander, request a scan or use an Ingame delivery feature, LW-Tools may process the commander UID, commander name, server, alliance, profile and progression values, map positions and verification or delivery status. The service also collects game-visible server, commander and alliance information to create maps, rankings, histories and comparisons.

Commander and alliance information obtained from the game can be displayed in public statistics, including historical changes. Account-to-commander links and private workspace content are not made public unless a user deliberately creates a public share link or uses a public publishing feature.

Processing for linked accounts and requested scans is necessary to provide those features (Article 6(1)(b) GDPR). Public server intelligence and historical comparisons are processed on the basis of our legitimate interest in providing useful community statistics from game-visible information (Article 6(1)(f) GDPR). You may object to this processing as described below.

Usage measurement

LW-Tools records website visits, including server, alliance and player statistics, Warzone Duel replays and reports, and Server Transfer comparisons. Map interactions such as searches and selected targets are also recorded. A record can contain the viewed entity, timestamp, canonical page path and user agent. For signed-in users it can contain their account identifier; for anonymous users it can contain an IP address and a protected hash derived from it. Share-link tokens are not stored in visit records. These records are used to understand feature usage, prevent abuse and operate the service under Article 6(1)(f) GDPR.

Support and email

If you contact support or request an email-based password reset, we process your email address, message, relevant account details and delivery metadata in order to answer the request or provide the requested account service (Article 6(1)(b) GDPR and, where applicable, Article 6(1)(f) GDPR).

03

Browser storage and cookies

LW-Tools uses local or session storage in your browser for functions you request. Depending on your use, this can include an authentication token and cached account context, theme and navigation preferences, reminder state, recent statistics and temporary calculator or predictor settings. Authentication data is removed from browser storage when you sign out; other preferences remain until you clear your browser data.

This essential storage supports the service and your chosen settings. It is not used by LW-Tools to build advertising profiles.

04

Service providers and recipients

LW-Tools uses processors and independent service providers only where needed to operate specific features:

• Cloudflare provides network delivery, security and, when configured, transactional email transport. Cloudflare receives technical connection data. Cloudflare Privacy Policy
• Stripe provides checkout, payment and subscription management. LW-Tools sends the account identifier, optional billing email, selected product and checkout metadata; full card details are handled by Stripe and are not stored by LW-Tools. Stripe Privacy Policy
• Polar may continue to process existing legacy subscriptions. It receives the account identifier, optional billing email, selected product and checkout metadata. Polar Privacy Policy
• Buy Me a Coffee is an optional external support and legacy payment channel. When you follow its link or complete a purchase, it processes data under its own terms. LW-Tools can receive payment and supporter metadata needed to credit a plan or LWT-Coins. Buy Me a Coffee Privacy Policy
• Resend may be used to deliver password-reset emails. It receives the recipient address and email content required for delivery. Resend Privacy Policy
• Content delivery providers may deliver browser-side libraries used for selected export or image-recognition features. A request to such a provider can disclose technical connection data such as your IP address and user agent.

Payments are processed to perform the requested contract (Article 6(1)(b) GDPR) and to meet legal accounting obligations (Article 6(1)(c) GDPR). Service security and fraud prevention are based on Article 6(1)(f) GDPR.

Some providers may process data outside the European Economic Area. Where required, transfers are covered by an applicable adequacy decision, standard contractual clauses or another lawful transfer mechanism offered by the provider.

05

Advertising

LW-Tools does not display advertisements or load Google AdSense or other advertising scripts. This applies to visitors with and without an account or paid plan. No advertising cookies are set by the current site.

Advertising was removed on 26 September 2026. Any browser storage left from earlier visits can be cleared through your browser's site-data settings.

06

Public content and share links

Public server intelligence can include Ingame names, UIDs, alliance membership, rankings, profile values and map or activity information. Users should not enter private real-world information into public names, notes or publishing fields.

Player and alliance profiles display aggregate visit counts for the last 30 days. Visitor identities are not included in these public counts. To improve loading speed, we also sample page and device categories with browser timing measurements. These timing records contain no names, profile identifiers, full URLs or raw IP addresses and are retained for 14 days; a keyed network-based identifier is used to limit repeated samples.

Deliberately created report and planner share links are accessible to anyone who has the link. Standard share records expire after three days. Other public links, such as an alliance's chosen public link, remain available until the responsible workspace member changes or removes them.

07

Retention and deletion

• Website visit and map activity records are scheduled for deletion after 90 days.
• Standard report and planner share records expire after three days.
• Account and workspace data is generally kept while the account or workspace is active and afterwards only as long as needed to resolve requests, protect the service or comply with legal obligations.
• Payment and transaction records may be retained for statutory accounting, tax, fraud-prevention and dispute periods.
• Game intelligence and historical statistics can remain available while needed to provide comparisons and public history, subject to applicable rights and legitimate interests.
• Security logs and backups are deleted or overwritten according to operational retention schedules unless an incident or legal obligation requires longer preservation.

You can request account deletion or deletion of eligible personal data by contacting the privacy address above. Some records may have to be retained or may be restricted instead of deleted where the law requires this.

08

Your data protection rights

Subject to the conditions of applicable law, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time for the future.

You also have the right to lodge a complaint with the data protection supervisory authority responsible for your place of residence, workplace or the location of an alleged infringement.

LW-Tools does not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

Submit a privacy request

09

Changes to this policy

We may update this policy when LW-Tools features, providers or legal requirements change. The effective date at the top identifies the current version. Material changes will be highlighted where appropriate.