Privacy Policy

Clash Club (clashclub.app) is operated by VN Esports Ltd, a company registered in England and Wales. We are the data controller for personal information processed through the Service.

Contact for privacy questions: info@teamelektros.com.

• From Google or Discord sign-in (whichever you use): your email address, display name, and profile picture URL. We do not request access to your Gmail, your Discord messages or servers, or other services on those accounts.
• From you directly: the Clash of Clans player tag(s) you choose to link, and a one-time API token used only to verify ownership at link time. The token is not stored.
• From Supercell's public API: cached copies of public game data tied to your linked tag — in-game name, current league tier, trophy counts, and historical trophy snapshots per scored round. This is the same data anyone with your tag can already read.
• From your browser: session cookies required to keep you signed in, and basic request metadata (IP address, user agent) used to operate and secure the Service.
• Error reporting: when something goes wrong, we send a diagnostic event to Sentry, which may include the URL you were on and your user ID. We do not intentionally send other personal data.

• To create your account and authenticate you.
• To verify and display your linked Clash of Clans accounts.
• To run competitions: read trophy data at scheduled times, compute ranks, and publish results.
• To operate, secure, and improve the Service.
• To contact you about your account or significant changes to the Service.

• Contract: to provide the Service you have signed up for.
• Legitimate interests: security, fraud prevention, and improving the Service.
• Consent: where we ask for it explicitly. We do not currently send marketing emails.

We do not sell your personal data. We share data only with the third-party processors required to run the Service:

• Supabase — database, authentication, and storage.
• Vercel — application hosting.
• Google and Discord — sign-in identity providers.
• Supercell — to read your public game data via their public API.
• Sentry — error monitoring.
• Amazon Web Services — static-IP proxy used to call the Supercell API.

Each processor is bound by its own terms and privacy practices. Some of these processors store or process data outside the UK / EEA; appropriate safeguards (standard contractual clauses or equivalent) are in place under each provider's terms.

We use first-party cookies to keep you signed in (Supabase auth session) and to remember basic UI preferences. We do not use advertising cookies or third-party tracking pixels. You can clear cookies via your browser at any time; this will sign you out.

• Profile and linked accounts: kept while your account is active.
• Account deletion is self-service: request it from your Settings page. Deletion takes effect after a 30-day grace period, during which you can cancel from the same page. Once executed, your sign-in identity (email / Google account link), linked Clash of Clans accounts, public handle, avatar and notification preferences are permanently removed.
• Tournament results and trophy snapshots are kept as part of the public competition record — removing them would corrupt standings for every other entrant. After deletion they appear under the name “Deleted player” with no link to you. Messages already posted to third-party platforms (e.g. Discord round announcements) cannot be retroactively edited.
• Deletion cannot complete while you have pending prize payouts or are enrolled in a live competition; it proceeds automatically once those resolve.
• Error reports in Sentry: retained per Sentry's default policy (typically 90 days).
• Cron and audit logs: 90 days.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Erase your data (“right to be forgotten”), subject to any legitimate retention reasons.
• Restrict or object to processing.
• Receive a portable copy of your data.
• Withdraw any consent you have given.

To exercise any of these rights, email info@teamelektros.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data.

The Service is not directed to children under 13, in line with Supercell's minimum age. We do not knowingly collect personal data from children under 13. If you believe we have, contact us and we will delete it.

We use industry-standard measures — TLS in transit, encrypted storage at rest, scoped service accounts, and least-privilege database policies — to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

We may update this Policy. The “Last updated” date above reflects the most recent change. Material changes will be highlighted on the site.

Privacy questions or data-rights requests: info@teamelektros.com.