Privacy Policy

Account and profile information

Accounts may include an email address held by the authentication provider, a unique public username, display name, avatar and profile biography. Email addresses are not published on creator profiles.

Optional Clash profile verification

A creator may choose to verify a Clash of Clans player profile. Verification uses the player tag and the temporary API token shown inside the game. The in-game API token is sent directly to the server for one verification request and is never written to the platform database, logs or public profile.

After successful verification, the platform may store and display selected public game data such as player tag, player name, Town Hall level, trophies, war stars, current clan, clan badge, clan level, member count and clan role. Creators control whether verified player and clan information appears publicly and can unlink it later.

Clan recruitment

Clan promotion is optional. A creator may advertise only the current clan returned for their verified player. The platform does not accept a manually typed clan identity as verified. Clan information may be hidden when it has not been refreshed recently, and it updates when the creator refreshes their linked profile.

Base submissions and community activity

Submitted bases include layout information, a processed screenshot and moderation history. Community activity may include comments, favorites, ratings, follows and reports. Public creator statistics may summarize approved uploads, downloads, ratings and follower counts. Private account notifications may record moderation decisions, comments, follows, reports and platform announcements so users can review important updates.

Transactional email

The platform may email administrators about new submissions and email creators when a submission is approved or rejected. The email provider receives the destination address and message content required for delivery. Limited delivery records—such as recipient, template, provider message identifier, status and error details—are retained for troubleshooting and are visible only to administrators.

Security and abuse prevention

Limited technical information is processed for bot protection, rate limiting and fraud prevention. Network and browser signals are transformed into keyed hashes before being used in short-lived rate-limit buckets. Raw IP addresses are not stored in public activity records, and expired rate-limit records are removed automatically.

Images

Uploaded screenshots are decoded, resized and re-encoded to remove embedded metadata. Pending screenshots are stored privately and become public only after approval. Rejected screenshots are removed from the moderation bucket.

Cookies

Necessary cookies maintain sign-in sessions and security preferences. Optional analytics or advertising cookies should load only after consent where required.

Retention and user choices

Account and submission records are retained while needed to operate the service, resolve disputes and prevent abuse. Users may edit profile visibility, unlink a verified game profile, and request access, correction or deletion subject to security, legal and moderation requirements.

Third-party processors

Hosting, authentication, database, storage, bot protection, transactional email, the official Clash of Clans API, analytics and advertising providers may process limited information under their own terms. The planned production stack includes Vercel, Supabase, Cloudflare Turnstile and Resend, with Google used when Google sign-in is enabled. The operator must add the final legal identity and contact details before public launch.