Information we handle
- Installation identifier: the app creates a random UUID and stores it on your device. It is sent with API requests. For installation activity, the server converts it to a one-way keyed hash. For anonymous feature event requests, it is used only for an in-memory rate limit and is not hashed or saved with the counters. The raw UUID is not stored in the database.
- Android device ID: the app sends Android's app-specific device ID (ANDROID_ID) with activity reports so reinstalls on the same device can be counted. The server converts it to a one-way keyed hash and does not store the raw value.
- Usage information: the server records aggregate request counts, API route, response status, cache result, response size, and request duration. It also records when a hashed installation was first and last seen and its daily activity.
- Anonymous feature counters: the app sends aggregated feature usage counts, such as deck copies and searches, with limited feature parameters and an optional app version. These are combined by UTC hour and are not linked to a user, installation, or device. No IP address, user agent, player tag, or device identifier is stored with these counters.
- App and device details: the app may send its version, Android version, and locale to help diagnose compatibility and understand app usage.
- Clash Royale identifiers: if you request player or clan information, the relevant player or clan tag is sent to our server and the official Clash Royale API to return the requested information. API responses may be cached briefly for performance.
- Advertising data: ads are provided by Google AdMob. Google may collect your device's advertising ID, IP address, device and app information, approximate location derived from your IP address, and ad interactions to serve, measure, and personalize ads and to prevent fraud. This information is collected by Google, not stored by RoyaleDecks.
- Purchase information: the optional "Remove ads" purchase is processed by Google Play. Purchase status is managed by RevenueCat, which receives an anonymous app user identifier it generates, purchase tokens, product and transaction details, and basic app and device information to confirm and restore purchases. We never receive your payment card or billing details.
- Push notifications: if you allow notifications, Firebase Cloud Messaging assigns a messaging token to your installation so the app can receive announcements. You can turn notifications off at any time in Android settings.
How we use information
We use this information to provide app features, show ads, process and restore purchases, send notifications, limit abuse, measure installations and active use, improve reliability, diagnose errors, and maintain API performance.
What we do not collect
RoyaleDecks does not require an account or offer subscriptions. It does not collect your name, email address, contacts, precise location, payment card details, or the contents of other apps, and our server does not receive your advertising identifier. Player tags, API response bodies, credentials, raw installation identifiers, and raw device IDs are not stored in usage analytics or error records.
Sharing and third parties
We do not sell personal information. Requests for Clash Royale data are sent to Supercell's official API. Advertising is provided by Google AdMob, purchases are processed by Google Play and managed by RevenueCat, and notifications are delivered by Firebase Cloud Messaging. Our hosting provider may process network information needed to deliver and secure the service. Each third party handles information under its own terms and privacy practices, including how Google uses information from apps that use its services, the Google Privacy Policy, and the RevenueCat Privacy Policy.
We may disclose limited information when required by law or when reasonably necessary to protect users, the app, or the security of the service.
Storage and retention
The installation UUID remains on your device until app data is cleared or the app is removed. The server keeps its hashed installation record, including the hashed device ID, to recognize an installation and device over time. Daily activity and aggregate operational records are kept only for analytics, security, and service maintenance. Anonymous feature counters are retained for 400 days by default. Cached Clash Royale responses expire automatically.
Security
We use reasonable technical and organizational safeguards, including HTTPS in transit and one-way keyed hashing of installation and device identifiers on the server. No electronic storage or transmission method is completely secure, so absolute security cannot be guaranteed.
Your choices and deletion requests
Where required, such as in the EEA, UK, and Switzerland, the app asks for your consent before personalized ads are shown. You can review or change that choice from Privacy options in the app. You can also reset or delete your advertising ID or opt out of personalized ads in Android settings. Buying "Remove ads" stops ads from loading in the app.
You can stop future collection and remove locally stored information by uninstalling the app or clearing its data. To request access to or deletion of server-side information associated with an installation, email suhrobcoder@gmail.com.
RoyaleDecks has no user accounts, and the server does not retain the raw installation UUID. We may need that UUID to locate its corresponding hashed record and may be unable to identify the record without it.
Children's privacy
RoyaleDecks is not directed to children under 13 and does not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so it can be reviewed and removed.
Changes to this policy
We may update this policy when the app or its data practices change. The effective date at the top of this page will show the latest revision.
Contact
For privacy questions, requests, or concerns, email suhrobcoder@gmail.com.