Clash Club

Privacy Policy

Last updated: 31 May 2026

1. Who we are

Clash Club (clashclub.app) is operated by VN Esports Ltd, a company registered in England and Wales. We are the data controller for personal information processed through the Service.

Contact for privacy questions: info@teamelektros.com.

2. What we collect

  • From Google Sign-In: your email address, display name, and profile picture URL. We do not request access to your Gmail or other Google services.
  • From you directly: the Clash of Clans player tag(s) you choose to link, and a one-time API token used only to verify ownership at link time. The token is not stored.
  • From Supercell's public API: cached copies of public game data tied to your linked tag — in-game name, current league tier, trophy counts, and historical trophy snapshots per scored round. This is the same data anyone with your tag can already read.
  • From your browser: session cookies required to keep you signed in, and basic request metadata (IP address, user agent) used to operate and secure the Service.
  • Error reporting: when something goes wrong, we send a diagnostic event to Sentry, which may include the URL you were on and your user ID. We do not intentionally send other personal data.

3. How we use it

  • To create your account and authenticate you.
  • To verify and display your linked Clash of Clans accounts.
  • To run competitions: read trophy data at scheduled times, compute ranks, and publish results.
  • To operate, secure, and improve the Service.
  • To contact you about your account or significant changes to the Service.

4. Lawful basis (UK / EU GDPR)

  • Contract: to provide the Service you have signed up for.
  • Legitimate interests: security, fraud prevention, and improving the Service.
  • Consent: where we ask for it explicitly. We do not currently send marketing emails.

5. Who we share it with

We do not sell your personal data. We share data only with the third-party processors required to run the Service:

  • Supabase — database, authentication, and storage.
  • Vercel — application hosting.
  • Google — sign-in identity provider.
  • Supercell — to read your public game data via their public API.
  • Sentry — error monitoring.
  • Amazon Web Services — static-IP proxy used to call the Supercell API.

Each processor is bound by its own terms and privacy practices. Some of these processors store or process data outside the UK / EEA; appropriate safeguards (standard contractual clauses or equivalent) are in place under each provider's terms.

6. Cookies

We use first-party cookies to keep you signed in (Supabase auth session) and to remember basic UI preferences. We do not use advertising cookies or third-party tracking pixels. You can clear cookies via your browser at any time; this will sign you out.

7. Retention

  • Profile and linked accounts: kept while your account is active. Deleted on request.
  • Tournament results and trophy snapshots: kept as part of the public competition record. We can remove your name from public-facing displays on request; the underlying score history may be retained in anonymised form.
  • Error reports in Sentry: retained per Sentry's default policy (typically 90 days).
  • Cron and audit logs: 90 days.

8. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Erase your data (“right to be forgotten”), subject to any legitimate retention reasons.
  • Restrict or object to processing.
  • Receive a portable copy of your data.
  • Withdraw any consent you have given.

To exercise any of these rights, email info@teamelektros.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data.

9. Children

The Service is not directed to children under 13, in line with Supercell's minimum age. We do not knowingly collect personal data from children under 13. If you believe we have, contact us and we will delete it.

10. Security

We use industry-standard measures — TLS in transit, encrypted storage at rest, scoped service accounts, and least-privilege database policies — to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

11. Changes to this Policy

We may update this Policy. The “Last updated” date above reflects the most recent change. Material changes will be highlighted on the site.

12. Contact

Privacy questions or data-rights requests: info@teamelektros.com.