1. Introduction
This policy explains how ClashKing collects, uses, stores, and protects information across the mobile app, web dashboard, Discord bot, admin tooling, and backend services. ClashKing helps players and clans view Clash of Clans statistics, manage server workflows, receive optional notifications, and coordinate rosters, reminders, tickets, and clan activity.
2. Information We Collect
a. Game Data
- Clash of Clans player tags, clan tags, names, statistics, clan information, war history, raid history, leaderboards, and performance metrics retrieved from official game APIs or generated by ClashKing features.
- Account links between Discord users and Clash of Clans player tags when you or a server administrator use linking, roster, reminder, ticket, role, or dashboard features.
b. Authentication Data
- Discord user ID, username/display name, avatar URL, guild membership context, OAuth metadata, and dashboard/admin sessions.
- Access and refresh tokens needed to keep you signed in. We do not store Discord passwords.
c. App Usage Data
- Preferences such as language, theme, selected player tags, dashboard column choices, notification settings, and bookmarked players or clans.
- Device and app details such as platform, app version, build number, operating system, and optional push notification tokens.
- Error logs and diagnostics used to fix bugs and protect the service. Sentry scope is limited to the minimum account identifier needed to debug authenticated errors.
d. Community and Admin Data
- Discord server configuration, roles, reminders, tickets, strikes, giveaway entries, roster data, announcements, push campaigns, and admin audit events.
- Security metadata such as IP address, user agent, action, resource, and timestamp for admin audit and abuse-prevention logs.
3. How We Use Your Information
We use the collected information to:
- Display your game statistics and clan performance data
- Provide widgets, dashboards, account links, rosters, reminders, tickets, roles, and server management features
- Send optional push notifications and in-app announcements that match your settings or your server administrator's configuration
- Maintain app functionality and user authentication
- Improve app performance through error tracking and bug fixes
- Ensure compatibility across different devices and operating systems
- Protect users, administrators, and the service from abuse, fraud, unauthorized access, and operational mistakes
- Respond to support, privacy, security, and legal requests
4. Data Storage and Security
a. Data Storage
- Mobile authentication tokens are stored in secure device storage where available. Dashboard sessions and PKCE state are stored in browser storage.
- Preferences, selected players, widget support data, cached images, and push settings may be stored locally on your device.
- Server-side records are stored in ClashKing databases and only kept while needed for the feature, security, audit, or legal obligations.
- Push tokens are removed when you opt out, log out, delete your account, or when the push provider reports them invalid.
b. Security Measures
- Data is encrypted in transit with HTTPS.
- Secrets are kept server-side and never intentionally exposed through public app or dashboard builds.
- Admin actions are access-restricted, confirmed for production-sensitive actions, and written to audit logs.
- We minimize crash-reporting context and avoid selling or sharing personal data for advertising.
5. Data Sharing and Disclosure
We do not sell your personal data and do not share it for cross-context behavioral advertising. We disclose data only when needed to operate ClashKing, protect the service, comply with law, or process your requests.
a. Third-Party Services
We integrate with the following services:
- Discord: OAuth login, bot commands, server features, role workflows, and account linking.
- Supercell/Clash of Clans API: Game data retrieval and account ownership verification.
- Firebase/APNs: Optional push notification delivery.
- Sentry: Error tracking with minimized user context.
- Bunny/CDN providers: Media hosting for configured assets, ticket transcripts, and generated images where features require it.
b. Creator Code Revenue
- When you use our creator code ClashKing, we receive 5% of your in-game purchases from Supercell
- This revenue sharing is handled entirely by Supercell and does not involve sharing your personal information with us
- Using our creator code costs you nothing extra
6. Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. You may also opt out of optional push notifications in the app or device settings.
- Use in-app privacy controls to request an export or deletion where available.
- Log out to clear local session data from the current device.
- Contact ClashKing support for Discord bot, dashboard, roster, ticket, or server-admin data requests that require verification.
- California residents may request disclosure, deletion, correction, and opt-out of sale/share. ClashKing does not sell personal data.
7. Children
ClashKing is not directed to children under the minimum age required by local law. We do not knowingly collect children's personal data. If you believe a child provided personal data to ClashKing, contact us so we can review and delete it where required.
8. International Transfers
ClashKing is available globally through supported stores and online services. Your information may be processed in countries other than where you live. When required, we use appropriate safeguards and limit processing to the purposes described in this policy.
9. Retention
- Account/session data is kept while your account or session remains active, then deleted or anonymized unless needed for security, audit, or legal obligations.
- Push tokens are deleted immediately on opt-out, logout, account deletion, or invalid-token feedback.
- Admin audit logs are retained for accountability and security for the necessary limitation period.
- Public Clash of Clans history may be retained for leaderboards, analytics, and historical game features, but user-account links are deleted or anonymized when no longer needed.
