Privacy Policy

Public Clash Royale data. When you look up a player, clan, deck, or card, CrownStats fetches that information from Supercell's official Clash Royale API. This data is public in the game itself — a player tag or clan tag you search isn't something we're collecting about you unless you link it to your own account.

Account information. If you create a CrownStats account, we collect your full name, username, email address, password (stored securely, hashed — we never see or store it in plain text), and country. Player tags and social handles (Reddit, YouTube, Instagram, X/Twitter, Discord) you choose to add to your profile are optional.

Content you create. Card Verdicts, Chest Verdicts, Chest Finds, and reactions you post are tied to your account and stored so we can display them, attribute them to you, and let you manage them later.

Payment information. If you make a donation or purchase an additional player tag slot, your payment is processed directly by Stripe. CrownStats never sees or stores your full card number — Stripe handles that under its own PCI-compliant systems, and we only receive confirmation that a payment succeeded.

Automatically collected data. Like most websites, we collect standard usage data through Google Analytics (pages viewed, general engagement, approximate device/browser type) and derive an approximate country from your IP address (never a precise location) — used to decide whether to show you a cookie consent prompt and, on our Live Visitors map, to show a general regional presence. We don't log or retain full IP addresses beyond that lookup.

To operate the features you're using — showing your linked profile, attributing content you post, processing a payment you initiated, and keeping the site reliable and secure. We use aggregate analytics to understand which features are actually useful and worth building on. We don't use your information for anything beyond operating and improving CrownStats.

CrownStats uses a small number of cookies. One records whether you're browsing from a region (the EU, UK, or US) where we show a consent prompt before any non-essential tracking runs, refreshed roughly every 24 hours. Another records your actual choice — accept or decline — once you make it, and expires after about six months, at which point you'll be asked again. If you decline, Google Analytics doesn't run in your browser.

We don't use third-party advertising cookies or sell any data derived from cookies.

We rely on a small number of trusted providers to run CrownStats, each bound by their own privacy terms:

• Supabase — hosts our database and handles account authentication.
• Stripe — processes payments; card details never touch our own servers.
• Google Analytics — aggregate, privacy-respecting usage analytics.
• Supercell's Clash Royale API — the source of all game data shown on the site.

We don't sell your personal information to anyone, ever.

We keep your account information for as long as your account exists. Content you post (Verdicts, Finds) stays tied to your account permanently, even if you later unlink the player tag you originally posted it under — this is deliberate: it prevents someone else who later claims that same tag from inheriting your posts or edit rights over them.

We don't currently offer a fully automated self-service "delete my account" button. To request deletion or correction of your personal information, contact us using the details below and we'll handle it directly.

Depending on where you live, you may have the right to access, correct, or request deletion of your personal information, and to object to or restrict certain processing. You can decline non-essential cookies at any time through the consent prompt. To exercise any of these rights, contact us below.

CrownStats is not directed at children under 13, and we don't knowingly collect personal information from anyone under that age. If you believe a child has provided us with personal information, contact us and we'll remove it.

We use industry-standard measures — including encrypted connections and secure, hashed password storage — to protect your information. No online service can guarantee absolute security, but we take reasonable steps to protect what you share with us.

We may update this policy as CrownStats changes. We'll update the "Last updated" date above when we do — for any material change, we'll make a reasonable effort to give notice on the site.

Questions about this policy, or a request relating to your data? Email us at [email protected].