Last updated: October 19, 2026

This page explains what information hubcw.com ("HubCW", "we", "us") collects, why, and what you can do about it. HubCW is a free fan site. We don't sell your information and we don't show ads.

1. What we collect

When you create an account:

• Username: shown publicly on your profile, listings and feedback. If you change it, your old usernames stay linked to your account so old links still reach your profile.
• Email address: kept private and never shown on the site. It's used to keep accounts unique and to identify your account if you contact us. HubCW doesn't send newsletters or marketing email.
• Password: stored only as a secure hash. We can't see your password.
• Google account, only if you use Continue with Google: Google tells us your Google account's id, name and email address. We keep the id, to recognise you the next time, and use the email as your account's email. The name is only used to suggest a username and isn't stored. We don't get your Google password or anything else from your Google account, and you can disconnect it in Settings once you've set a password.
• Discord account, only if you use Continue with Discord: Discord tells us your Discord account's id, username, display name and email address (and whether Discord has verified it). We keep the id, to recognise you the next time, and use the email as your account's email. The names are only used to suggest a username, and your Discord username goes on your profile only if you tick the box for it when you sign up. We don't get your Discord password, messages or servers, and you can disconnect it in Settings once you've set a password.
• Profile details you choose to add: in-game name, job, level, world, guild, avatar, bio, signature and Discord name. These are shown publicly on your profile.

When you use the site:

• Listings and sales: your listings, replies, asking prices and the final prices you record when you mark a listing sold.
• Screenshots you upload: the images, plus the item name and stats our software reads from them to fill in your listing. The item stats read this way are also kept, even after the listing is deleted, to improve the game database. They're never shown with your name.
• Live shops, only while you share your game window on Go live: your browser reads your store window and minimap on your PC and sends us what it read (store title, name tag, items, prices, room and the channel you pick) and, when it changes, a picture of the store half of the window with your mesos blanked out. Nothing else of your screen leaves your PC. The shop and picture are public on Live shops while it's open. Pictures are deleted a day after your shop was last seen, the rest after 30 days.
• Equipment window screenshots for your character avatar are only read to find your items and deleted straight away. What we keep is the look you save (skin, hair, face and item ids) and the picture drawn from it.
• Feedback and rep you give and receive. This is public.
• Private messages you send and receive.
• Watched listings and item alerts you set up, and reports you send to staff.
• When you were last seen. Your profile shows this, along with an "online" dot if you were active in the last 10 minutes.

Collected automatically from every visitor:

• IP address: used to block spam and brute-force logins (for example, limiting sign-ups and login attempts). If you sign up through a giveaway invite link, we keep a one-way hash of your IP with the invite, so several sign-ups from one connection count once. These rate-limit records are deleted after about 24 hours.
• IP addresses on your account: while you're logged in, we note each IP address you sign in or browse from (when it was first and last used, and how many times you signed in from it), and the one you signed up from. HubCW admins see them, with a rough location (city and country) and network name looked up from the address on our own server, to stop ban evasion, scams and multiple-account abuse. Nobody else sees them. An address is deleted 180 days after it was last used; the sign-up address is kept with your account.
• Server logs: our web server records each request (IP address, page, time, browser and referring page). The logs are deleted after about 14 days.
• CW Companion: when the desktop app checks for updates or prices, or you press Download on its page, we note the day, the app version and a one-way hash of your IP address, to count how many people use it. These counts are deleted after 90 days.
• Bot check: the sign-up and login pages use Cloudflare Turnstile to tell people from bots. It looks at your browser and connection (including your IP address) and is covered by Cloudflare's Turnstile privacy addendum.
• Analytics: see section 3.

2. Cookies

• hubcw: a session cookie that keeps you logged in. It lasts up to 30 days and is required for the site to work.
• hubcw_m: remembers which HubCW accounts have logged in on this browser (account numbers only), so giveaway invites can't be used to invite yourself. Lasts about a year.
• Google Analytics cookies (_ga and similar): count visits and show which pages are popular. See section 3.

You can block or delete cookies in your browser settings. If you block the hubcw cookie, you won't be able to log in.

3. Google Analytics

We use Google Analytics to understand how many people visit and which pages they use. Google collects details like your IP address, browser, device, rough location and the pages you view, and stores them under its own privacy policy. You can opt out with Google's opt-out browser add-on or a content blocker.

4. Price data from public Free Market stores

Price Check also includes sales seen in public in-game Free Market stores, from screenshots and public Twitch streams. To avoid counting the same sale twice, we may keep a store's title and its owner's character name. These are never shown on the site. A sale recorded this way shows only the item, price, time and where it was seen (for example, a link to the stream).

5. How we use your information

• To run the marketplace, Price Check, private messages and your profile.
• To keep the site safe: stopping spam, scams, bots and abuse, and enforcing the Terms and Marketplace Rules.
• To understand how the site is used so we can improve it.

6. Who can see it

• Everyone: your username, profile details, listings, sale prices, feedback and last-seen time.
• HubCW staff: can access the database to run and moderate the site, for example to look into a report.
• Service providers: the site runs on servers hosted by DigitalOcean, Cloudflare delivers it and runs the bot check, Google provides analytics and the optional Google sign-in, and Discord the optional Discord sign-in.
• When required by law: we'll share information if the law requires it, or to protect members from fraud or harm.

We never sell or rent your information.

7. How long we keep it

We keep your account information while your account exists. Rate-limit records last about 24 hours, server logs about 14 days, CW Companion usage counts 90 days, and the IP addresses on your account 180 days after each was last used (the sign-up one stays with the account). Screenshots you started uploading but never attached to a listing are deleted after a day. Sale prices stay in Price Check history even after a listing closes.

8. Your choices

• You can change your username, email, password and profile details at any time in Settings.
• You can delete your own listings.
• To delete your account, or to get a copy of the information we hold about you, send a private message to a HubCW admin. When we delete an account, we remove its profile, email and private information. Sale prices may stay in Price Check history without your name.

Depending on where you live (for example, in the EU, the UK or California), you may have more rights, such as the right to correct your data or to object to how it's used. Contact us and we'll help.

9. Security

The site only works over HTTPS, passwords are hashed, and session cookies can't be read by scripts. No website is perfectly secure, so use a password you don't use anywhere else, and never use your Nexon password.

10. Children

HubCW isn't meant for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has created an account, contact us and we'll delete it.

11. Changes to this policy

We may update this policy. When we do, we'll change the date at the top of this page.

12. Contact

For privacy questions or requests, email us at [email protected], send a private message to a HubCW admin, or use the Report button on a listing or profile.