Privacy Policy

Who we are

ClashBuilder (clashbuilder.com) is a fan-made library of Clash of Clans base layouts and guides, run by Samir shafy, Morocco. We are responsible for the personal data described here. For anything in this policy, write to support@clashbuilder.com.

What we collect

If you create an account

Your username, email address and password. The password is stored only as a one-way hash; we cannot read it.
Anything you add to your profile: avatar, cover image, bio and country.
When you last signed in and the IP address you signed in from.
If you sign in with Google: your Google account ID and email address. We do not receive your Google password.

If you link your Clash of Clans village

Your player tag, and public village details we look up with Supercell's official Clash of Clans API.
To prove the village is yours, you paste the API token from the game's settings. It is checked once with Supercell and never stored. We never ask for your Supercell ID or game password.

What you create

Base layouts you upload (images, copy links and descriptions), armies, collections, favourites, follows and likes.

Without an account

When you copy a layout, rate one or react to an article, we record a session identifier or a one-way hash of your IP address and browser, so each visitor is counted once. Reactions and comments also keep the IP address itself for 30 days, to deal with abuse, and it is then removed.
Comments: the name, email and optional website you enter, plus your IP address and browser.
Newsletter sign-up: your email address, IP address and where you signed up.
The contact form: your name, email address and message.

From everyone

Server logs: IP address, the page requested, date and browser, kept for 14 days.
Cookies: a session cookie and a security token that the site needs to work, your cookie choice, and - only if you accept them - Google Analytics and Google AdSense cookies. See our Cookie Policy.

Why we use it

To run your account and the features you use - signing in, your profile, uploads, collections and linking your village. This is needed to provide the service you asked for.
To count copies, ratings and reactions once per visitor, and to keep the site secure - including limits on sign-in attempts and the sign-in IP address. This is our legitimate interest in a fair and safe site.
Analytics and personalised ads - Google Analytics and AdSense, only with your consent, which you can withdraw at any time from the cookie settings.
The newsletter - only if you tick the box, and only until you ask us to stop.
Answering you when you use the contact form or email us, and meeting our legal obligations.

Who we share it with

We do not sell your personal data. It is shared only with the services that run the site:

Hostinger - hosts the site and its database, and delivers our emails (verification, password reset, replies).
Google - Google sign-in, if you use it; Google Analytics and AdSense, if you accept them.
Supercell - receives your player tag and the one-time token when you link a village, through its official API.

Your username, profile and anything you publish - layouts, armies, comments - are public on the site. We may also disclose data where the law requires it. These providers may process data outside your country; each has its own privacy policy.

Advertising cookies and your choices

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or to other websites. Google's use of advertising cookies lets it and its partners show you ads based on your visits to this site and other sites on the internet.

You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of some third-party vendors' cookies at www.aboutads.info/choices. On this site, advertising cookies are only set after you accept them in the cookie banner, and you can withdraw that choice at any time from the cookie settings. See our Cookie Policy for the full list.

How long we keep it

Account and profile data: until you delete your account.
Server logs: 14 days. IP addresses on reactions and comments: 30 days. Session cookies: they end two hours after your last activity.
Newsletter email: until you ask us to remove it.
Contact messages and emails: as long as needed to deal with them; you can ask us to delete them.
Copy, rating and reaction records, and comments: for as long as the layout, article or comment is on the site.

Deleting your account

You can delete your account at any time from your account settings. This removes your account, your Google sign-in link, your favourites, follows, collections and likes, and your avatar and cover image.

Base layouts and armies you published stay on the site without your name, because other players may have saved or linked them. To have them removed, delete them before deleting your account, or email us at support@clashbuilder.com.

Your rights

You can ask us to:

show you the personal data we hold about you, or send you a copy;
correct it (most of it you can edit yourself in your account settings);
delete it, or stop using it for a particular purpose;
stop the newsletter or withdraw any consent you gave.

Email support@clashbuilder.com and we will reply within one month. If you are not satisfied, you can complain to your data protection authority - in Morocco, the CNDP; in the European Union, the authority of your country.

Children

You must be at least 13 to create an account. We do not knowingly collect personal data from children under 13; if you believe a child has given us some, contact us and we will delete it.

Security

Passwords are stored only as hashes, the whole site is served over HTTPS, and sign-in attempts are rate-limited. No system is completely secure, but we will tell affected users and the relevant authority if a breach puts your data at risk.

Changes to this policy

When this policy changes, we update the date at the top of this page. If a change affects how we use data you have already given us, we will tell account holders by email.