Privacy Policy

ClashRecord is a free, fan-made Clash of Clans tracker. We collect the minimum needed to run the site: an optional account (username and password — no email required) and the game data you choose to save. There are no ads, no analytics trackers, and we never sell data.

You can browse players, clans, and wars without signing up. The player and clan tags you search are sent to the official Clash of Clans API to fetch public game data; we don't link them to you.

Your IP address is used transiently in memory to rate-limit requests and prevent abuse. It is not written to a database or used to profile you.

We store:

• Your username and a hashed version of your password (bcrypt). We never store your password in plain text, and we don't ask for an email address.
• The villages you save: player tags, optional nicknames, and which one is primary.
• Progress snapshots of your saved villages — public game data (levels, trophies, war stars) fetched from the official API so you can see changes over time.
• Building and upgrade levels you enter manually or import, since the official API doesn't expose them.
• Feedback you submit through the feedback form.

The in-game village export you paste is parsed in your browser. Only the resulting building and upgrade levels are saved to your account (and only for villages you've saved) — the raw JSON file itself is never uploaded or stored on our servers.

We set one cookie: the session cookie that keeps you signed in. There are no advertising or tracking cookies.

Preferences like your theme, tracker settings, and Gold Pass selection are kept in your browser's local storage and stay on your device.

• Supercell's Clash of Clans API — receives the player and clan tags you look up, and returns public game data. Game content is owned by Supercell; see their Fan Content Policy.
• Railway — hosts the site and its database, so account data is processed and stored on their infrastructure.

We don't share or sell your data to anyone else.

You can remove any saved village from your account page at any time — this also deletes its progress snapshots and saved building levels. To delete your entire account, send a request through the feedback form on the account page and we'll remove it along with all associated data.

The site is served over HTTPS, passwords are hashed with bcrypt, and sign-in attempts are rate-limited. No system is perfectly secure, but we keep the amount of data we hold deliberately small.

ClashRecord doesn't knowingly collect personal information from children. An account only requires a username, which doesn't need to identify you.

If this policy changes, we'll update this page and the date at the top. Significant changes will also be noted in the change history.

Questions about this policy? Reach us through the feedback form on your account page.