We collect the following types of information when you use Clashsolid:

• Account Information: When you sign in via WorkOS AuthKit, we receive your email address and basic profile data provided by your identity provider (e.g. Google).
• Clash of Clans Data: We query the official Clash of Clans API on your behalf to display war statistics, base layouts, and hall‑of‑fame records. We do not store your Supercell account credentials.
• Usage Data: We use Vercel Analytics and Speed Insights to collect anonymised page‑view and performance metrics (no personally identifiable information is stored by these tools).
• Voluntarily Submitted Data: Any content you upload (e.g. base layouts) is stored in our database solely to deliver the service back to you.

We use the information we collect to:

• Authenticate you and maintain your session.
• Display personalised Clash of Clans statistics and layouts for your clan.
• Send transactional emails (e.g. account confirmations) via Resend.
• Improve the performance and reliability of the service through aggregated, anonymised analytics.
• Comply with legal obligations.

We do not sell, rent, or trade your personal data to third parties.

Your data is stored in Supabase (PostgreSQL), hosted on secure cloud infrastructure. We apply industry‑standard security measures including:

• Encrypted connections (TLS/HTTPS) for all data in transit.
• Row‑level security policies to ensure users can only access their own data.
• Regular security reviews of third‑party dependencies.

While we take reasonable steps to protect your data, no system is completely secure. Please notify us immediately if you suspect unauthorised access.

We use the following cookies and browser storage mechanisms:

• Authentication cookies: Set by WorkOS AuthKit to maintain your signed‑in session. These are necessary for the service to function.
• Analytics cookies: Vercel Analytics may set anonymised cookies for performance measurement.

You can disable cookies in your browser settings; however, doing so may prevent you from signing in or using parts of the service.

Clashsolid integrates with the following third‑party services:

• Supercell / Clash of Clans API — game data retrieval. Subject to the Supercell Fan Content Policy.
• WorkOS AuthKit — identity and authentication.
• Supabase — database and backend services.
• Resend — transactional email delivery.
• Vercel — hosting, analytics, and performance monitoring.
• Railway — cloud infrastructure used to host backend services and scheduled jobs. Data in transit is protected via TLS; Railway's own privacy policy governs data processed on their platform.
• Patreon — voluntary supporter payments (processed entirely by Patreon; we receive no payment details).

Each provider has its own privacy policy. We encourage you to review them.

Depending on your jurisdiction you may have the right to:

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated personal data.
• Object to or restrict certain processing activities.
• Data portability (receive your data in a machine‑readable format).

To exercise any of these rights, please contact us at the email address below.

Clashsolid is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please reach out via the Patreon community page or open an issue on our public repository.