ClashBattle Privacy Policy

Users can report accounts, guilds, tournaments and shared content, and can block other users. Reports include the selected reason, optional details, the reporter, the reported target and review status.

We use these records to investigate abuse, enforce our rules and protect the community. Blocking limits the blocked account's visibility and interaction where supported. Misuse of reporting tools may itself lead to enforcement.

Depending on the features you use, ClashBattle may collect:

• Google account identity, including name, email address, profile photo and authentication identifier.
• Player profile details such as username, bio, country or region, language, time zone, game UID, game statistics, guild membership, achievements and an optional YouTube channel handle.
• Guild, tournament, announcement, participation, result and moderation records.
• Non-cash coin balances, reward history and related activity records.
• Device and technical information such as device identifier, model, app version, notification token, IP address, crash logs and security events.
• Images or screenshots that you choose to upload for profiles, guilds, tournaments, support or result verification.

ClashBattle v1 does not request your phone number, street address, contacts, SMS, call history, precise or approximate device location, health information, race or ethnicity, political or religious beliefs, sexual orientation, credit information, microphone recordings or videos.

• Authenticate users and maintain ClashBattle accounts.
• Provide profiles, guilds, tournaments, leaderboards, notifications, rewards and support.
• Verify tournament results, enforce rules, prevent cheating, fraud, abuse and unauthorized access.
• Maintain service reliability, diagnose crashes and improve product performance.
• Comply with legal obligations and resolve disputes.

We do not sell personal information. Google Identity Services and Firebase Authentication process sign-in identity and authentication tokens. Firebase Cloud Messaging processes device notification tokens and topic subscriptions. Firebase Crashlytics processes crash, device, app-version and diagnostic information. Firebase Admin/Firestore and our hosted API process account and feature data on the server.

Retrofit and OkHttp transmit authenticated API requests between the app and ClashBattle servers. Coil retrieves profile, banner and other remote images; the image host may receive ordinary connection data such as IP address and user agent. Android Jetpack, Jetpack Compose, Hilt, Kotlin Coroutines and the shimmer library operate primarily within the app and are not used by us as independent advertising or data-broker services.

v1 does not include advertising SDKs, billing, paid subscriptions, precise-location collection or an advertising identifier. If those features are enabled later, this policy and the Play Data safety declaration will be updated before release.

We may disclose information when required by law, to protect users and the service, or during a business transfer subject to appropriate safeguards. Public profile fields are visible to other users only when your profile is set to public.

Data sent between the Android app, Google/Firebase services and the ClashBattle API is encrypted in transit using HTTPS/TLS. We also use access controls, authenticated APIs and role-based permissions to protect data. No online service can guarantee absolute security.

We retain account data while your account is active and as needed to provide the service. Certain transaction, fraud-prevention, moderation or legal records may be retained for a limited period after deletion where reasonably necessary or legally required. Data that is no longer required is deleted or anonymized.

• Edit your profile and choose whether it is public.
• Remove your optional YouTube link and control notification preferences.
• Delete your account from Profile → Delete Account in the Android app.
• If you cannot access the app, use our web account deletion instructions or contact page.

Account deletion removes the Firebase Authentication account and associated ClashBattle profile data, except information that must be retained for security, fraud prevention, dispute resolution or legal compliance.