Warhost

Install Warhost

Add Warhost to your home screen to open it full-screen like an app, with your saved lists available offline. No app store, no account.

iPhone / iPad (Safari): tap the Share icon (the square with an up-arrow), then Add to Home Screen.

Android (Chrome): tap the ⋮ menu, then Install app (or Add to Home screen).

Chrome / Edge (desktop): click the install icon at the right end of the address bar.

Keyboard shortcuts

/
Focus the unit search
Enter
Add the top search result
Ctrl+S
Save the list
Ctrl+Z
Undo the last change
Ctrl+Shift+Z or Ctrl+Y
Redo the change you just undid
?
Show this list

Privacy policy

Last updated 17 October 2026

Warhost is a free army list builder run by Aodhan, an individual. I'm the person responsible for your data here. Questions or requests: contact@aodhan.dev.

If you never sign in

Your lists, drafts and settings stay in your browser's own storage on your device. That includes your saved lists, the draft you're working on, your last faction and allegiance, and small flags like whether you've dismissed a banner. Forces you've opened are also cached on your device so they load faster next time. None of that is sent to me. Clearing your browser data removes it.

The game data for each force is fetched from the jsDelivr content network, so jsDelivr sees your IP address when that download happens.

If you sign in

Signing in is optional and only needed to keep saved lists on more than one device. You give your email address and I send you one email with a one-time sign-in link, which expires after 15 minutes, and a six-digit code that does the same job and expires after 5 minutes. There's no password.

  • Your email address is stored in my database (hosted on Turso) as your account.
  • The sign-in email is sent through Resend. If you reply to it, Resend's inbound mail service forwards your reply to my personal mailbox. What's forwarded is your address, the subject, the message body and any attachments. Only I read it.
  • A sign-in session lasts 90 days. The session record can include the IP address and browser details of the device you signed in from, and your browser keeps a session cookie.
  • When you save a list to your account, its name, force and contents are stored in the same database, tied to your account.

Share links

When you create a share link, the list (including its name and force) is stored in the database so anyone with the link can open it, signed in or not. Shares aren't tied to your account, and the link doesn't expire. Don't put anything in a list name that you wouldn't want a stranger with the link to read.

Usage analytics and error reports

Warhost uses PostHog, on its EU servers, to see how the app gets used: which pages are opened, and which features are used while building, fitting, saving and sharing lists. It also sends error reports when something breaks, including uncaught errors and some messages the app writes to the browser's error console. Session recordings are turned off, and anything typed into form fields is masked. The app doesn't attach your email address or account to these events. Like any website, the servers receiving these requests see your IP address and browser details.

Browsers can also send me reports when a page breaks its own security rules. I only count those; what's inside them isn't kept.

To block abuse of sign-in, saving and sharing, the server keeps a count of requests against your full IP address for up to 24 hours. To cap how many sign-in emails go to one address, it also keeps a scrambled form of your email address (not the address itself) with the time of each sign-in email for 24 hours.

Unusual or rejected requests, such as a burst of hits on pages that don't exist or a failed sign-in, are logged for 30 days with a shortened IP address (the last part is dropped), the request type, the route, the start of your browser details and a count, so I can spot abuse.

Who else handles your data

  • Microsoft Azure Static Web Apps hosts the site.
  • Turso stores the database (accounts, sessions, saved lists, shares).
  • Resend delivers sign-in emails and receives replies to them before forwarding them to me.
  • PostHog receives analytics and error reports.
  • jsDelivr serves the game data files.

I don't sell your data and there are no ads in Warhost.

Deleting your data

Lists saved only on your device: delete them from the Saved page, or clear your browser data.

Lists saved to your account: delete them from the Saved page while signed in, and they're removed from the database.

Your whole account: sign in, open the Saved page and tap Delete account. That removes your account, your sessions and every list saved to it straight away. The steps are on the delete your account page. If you can't sign in, email contact@aodhan.dev from the address you signed in with and I'll do it for you.

Share links are the exception. They aren't tied to your account, so deleting the account doesn't remove them and there's no button for it. Email me the link and I'll delete that share.

Not affiliated with Games Workshop

Warhost is a fan-made tool and is not affiliated with, endorsed by, or sponsored by Games Workshop. Horus Heresy and related names are trademarks of their owners. Game data comes from the BSData community repository.

Changes

If this changes in a way that matters, the date at the top will change with it.

Warhost is a fan-made tool and is not affiliated with, endorsed by, or sponsored by Games Workshop. Horus Heresy and related names are trademarks of their owners.