Last updated 30 August 2026
WannaLogin is the sign-in service for Wannaverse. It holds the account you sign in with and decides what the other Wannaverse applications are told about you. It is operated by WannaCall Ltd, company number 13112226, registered at 124 City Road, London, England, EC1V 2NX.
| What | Why | How long |
|---|---|---|
| Email address, and whether it has been confirmed | It is how you sign in and how we send you a reset link | Until the account is deleted |
| Profile details you enter: name, username, date of birth, phone number, address, language, time zone, profile picture | To tell applications who you are, and only the parts you agreed to when you signed in to each one | Until you clear them, or the account is deleted |
| A hash of your password | To check the password without storing it | Until the account is deleted |
| Your authenticator app secret and recovery codes, both encrypted or hashed | To check the codes your second factor produces | Until you remove the second factor |
| Sign-in attempts: the address used, the source IP address, the browser, the outcome | To stop somebody guessing passwords, and to show you on your own security screen where your account has been used and where somebody has tried | 90 days |
| Sessions: where each one was started from, and when it was last used | So you can see everywhere you are signed in and end any of them | 14 days after the session ends |
| Which applications you have allowed, and what you allowed them | So you are not asked again, and so you can take it back | Until you remove the application, or 7 days after the last grant expires |
| An audit trail of administrative actions: who did what to which account, and from where | So that a change to somebody's access can be traced to the person who made it | 400 days |
When you sign in to a Wannaverse application, it is told your account identifier and whichever of the details above match the permissions you agreed to on the consent screen. Nothing else is passed on, and no application is given your password, your second factor or your sign-in history.
You can see every application you have allowed, and what each one may see, on the Applications screen in your account. Removing one there stops it immediately: the access it already holds is revoked rather than left to expire.
Nothing here is sold, and nothing is passed to an advertiser or an analytics provider. There is no third-party script on any page of this service, which is why there is nothing to consent to beyond the cookies described below.
You can see and correct almost all of this yourself from your account. Two things you cannot: the email address you sign in with, which is fixed for the life of the account because changing it is how an account gets taken over, and the account itself. For either, including asking for the account and its history to be deleted, email support@wannaverse.com. Where the organisation that provisioned your account is your employer, some of this is theirs to decide rather than ours, and we will tell you when that is the case.
If you are not satisfied with how a request has been handled, you can complain to the Information Commissioner's Office.