It has come to our attention that Personally Identifiable Information of TMW users has been shared on the Discord chat service by automated TMW administration processes.
The password recovery form at https://www.themanaworld.org/recover/password communicates with a Discord API to notify the Manasource Team when a user has reset their password. The information sent includes username and IP address of the requestor.
This is a breach of the TMW Privacy Policy. We should not have shared this information with a third party data aggregator (Discord).
I would like to stress that this was obviously done with the best of intentions - keeping TMW secure is a top priority of the Manasource Team. Monitoring for suspicious password reset activity is a good thing.
We are currently working on locating and removing the code that performs this action. We will also be carefully examining our code and processes for any other information leaks of this type, both past and present.
The security and safety of our users is important to us and we sincerely apologize for this oversight.