Privacy Policy

1. Overview

ClashVault ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully so you understand the processing described here and the choices available to you.

2. Information We Collect

Account Information

When you create an account, we collect the email address you provide during registration. Authentication is handled securely through Supabase Auth.

Newsletter Email

If you subscribe through the site footer, we store the email address you submit, the footer signup source, the subscription timestamp, and the disclosure policy version and stated purpose shown with that form. Newsletter signup is separate from creating a ClashVault account.

Game Data

When you look up a player or clan, we retrieve publicly available data from the official Clash of Clans API, including player tags, names, troop levels, clan information, and game statistics. If you import your village data, that import data is stored in your account and treated as private by default.

Usage Data

We automatically collect certain usage information, including:

• Identifier-free server-observed product counters — for selected actions and outcomes that ClashVault's server confirms, ClashVault records event type, category, outcome, an allow-listed product-area key (for example, Ore Calculator), and an hourly count to understand aggregate feature use and service reliability. These counters do not contain an account ID, visitor or session ID, IP address, user agent, page URL, game tag, entity ID, attribution source, or event metadata; do not require a browser analytics cookie; and do not represent total visitor traffic.
• Lookup history — player and clan tags you search for while signed in, used to show your recent lookups and improve the Service
• Detailed page views and interactions— when measurement is enabled, general usage, interaction patterns, first-party pseudonymous visitor/session cookies, lookup attribution sources, and conversion funnel events used to deduplicate public view counts and improve analytics
• Device and browser information — browser type, OS, screen resolution, and similar technical data
• Network information — IP address, approximate location from hosting provider headers, and hashed IP identifiers used for abuse prevention, security/network profiling, bot/noise filtering, and admin analytics. We do not treat one IP address as one person.

Cookies

We use cookies and similar technologies for authentication, user preferences, consent-controlled detailed first-party analytics/attribution, security review, and advertising. Our identifier-free hourly product counters do not use an analytics cookie. For details, see our Cookie Policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Measure aggregate feature use, outcomes, and reliability without building a visitor or session profile
• Authenticate your identity and manage your account
• Display public player and clan profiles using official API data
• Power discovery features like trending players and clans based on lookup popularity
• Store and process your imported village data for upgrade tracking and planning
• Serve relevant advertisements through Google AdSense
• Detect and prevent abuse, fraud, and security incidents
• Communicate important service updates
• Send product and Clash of Clans event updates when you separately subscribe to the newsletter

4. Third-Party Services

ClashVault integrates with the following third-party services that may process your data according to their own privacy policies:

5. Cookies & Tracking

ClashVault uses cookies for essential functionality (authentication sessions), consent-controlled detailed first-party analytics and attribution, security and abuse prevention, and advertising (Google AdSense). Selected identifier-free server-observed product counters operate without an analytics cookie and remain separate from Google Consent Mode. For a comprehensive breakdown of the cookies we use and how to manage them, please see our Cookie Policy. You can allow or decline optional ClashVault analytics in the cookie settings. Your explicit choice applies to our detailed measurement independently of Google advertising settings. Where a Google Privacy & messaging notice is published for your region, you can review or revisit Google advertising choices through the "Privacy and cookie settings" control in the site footer. The same control disables ClashVault's detailed visitor/session measurement before reopening the Google message. It does not disable those selected identifier-free counters. Counter rows do not store a visitor, session, account, device, network, URL, entity, attribution, or request-metadata field.

Third-party vendors, including Google, use cookies to serve ads based on a visitor's prior visits to ClashVault or other websites. Google's use of advertising cookies enables Google and its partners to serve ads based on those visits. You can opt out of personalized advertising in Google Ads Settings. Additional advertising-cookie details and browser controls are available in our Cookie Policy.

Third parties may place and read cookies in your browser, or use web beacons, IP addresses, or other identifiers to collect information as a result of ad serving on ClashVault. Read how Google uses data on partner sites for more information.

Google-authorized third-party vendors and ad networks may also serve ads on ClashVault. Google maintains a certified external vendor list that identifies these providers and links to their websites. Where a vendor offers a personalized-advertising opt-out, you can use the choice on that vendor's website. You can also opt out of some participating vendors through YourAdChoices.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data — retained until you delete your account
• Imported village data — retained until you delete your account or remove the data manually
• Newsletter subscription data — retained while the subscription remains active or until you request removal through our Contact page
• Lookup history — retained for trending and analytics purposes; individual entries may be pruned after extended periods
• Raw analytics events — including lookup IP addresses, are pruned after 90 days
• Identifier-free server-observed product counters — hourly event type, category, allow-listed product area, outcome, and count totals for selected server-confirmed actions may be retained within a 24-month window, with expired hourly counters removed by hourly cleanup
• Other aggregated analytics — source summaries, counts, hashes, and rollups may be preserved longer after raw IP data is pruned
• Public API data — cached temporarily to improve performance; refreshed from the official API regularly

When you delete your account, we will delete your personal data within a reasonable timeframe, except where retention is required by law.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal data:

GDPR (European Union)

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing of your data for certain purposes

CCPA (California)

• Right to Know — request information about the categories and specific pieces of personal information collected
• Right to Delete — request deletion of your personal information
• Right to Opt-Out — opt out of the sale of personal information (ClashVault does not sell personal information)
• Non-Discrimination — you will not be discriminated against for exercising your rights

To exercise any of these rights, please contact us using the information in the Contact section below.

8. Children's Privacy

ClashVault is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can take appropriate action.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws and provider terms. Contact us through the channel below if you have questions about an international transfer involving your information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. If a change materially affects how we process personal information, we will provide additional notice where appropriate.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, email clashvaultapp@gmail.com, preferably from the address associated with your ClashVault account. Do not send passwords, authentication codes, or private export tokens. Additional reporting guidance is available on our Contact page.