Privacy Policy

Effective Date: November 5, 2026 (Originally Published: June 5, 2026)

This Privacy Policy explains how ClashCalc (formerly OreCalc, "we", "our", or "the Service"), accessible at clashcalc.com and orecalc.tech, handles your information.

Our Service is designed to be privacy-first. By default, we do not collect, store, or process any of your personal data on our servers.

1. Client-Side Processing (Offline by Design)

ClashCalc is a Progressive Web App (PWA) that executes calculations and runs upgrade planning entirely on your local machine.

• No calculations, upgrade costs, or resource estimates are computed on our servers.
• Aside from fetching game statistics and optional cloud synchronization, the Service does not require an internet connection to function.
• Your preferences (language, currency, theme, and planner configurations) are stored on your own device using browser localStorage. We cannot access or view this data.

2. Data Handled by the Service

Under specific interactions, the Service handles the following data:

• Clash of Clans Player Tags: When you enter a Player Tag, the app queries the official public Clash of Clans API to fetch player tag data, including hero equipment and upgrade levels. Player tags and game statistics are public. Your tag is stored locally on your device unless Cloud Sync is explicitly enabled.
• User Accounts & Authentication (Optional): If you choose to register an account, we process the following authentication credentials:
  • Username: A pseudonymous identifier (3–20 characters) chosen by you to identify your account.
  • Password: When registering with a password, it is salted and hashed using bcrypt before being stored in our database. Plaintext passwords are never logged, stored, or accessible to anyone.
  • Passkeys (FIDO2 / WebAuthn): When registering with a Passkey, only public credential metadata (credential ID, public key, sign counter, and an optional device nickname) is stored on our servers. Private cryptographic keys remain strictly on your personal authenticator device and never leave your device.
  • Session Tokens: Cryptographically signed JSON Web Tokens (JWT) stored in your browser's local storage to maintain active, authenticated sessions.
• Cloud Sync (Optional & Opt-In): If you choose to enable Cloud Synchronization, your settings and local calculator configurations are securely backed up to our servers to allow cross-device sync. Note that you must first fetch your data from the Clash of Clans API to enable Cloud Sync; synchronization is not permitted without a valid player tag.
• Automated Error Diagnostics (Self-Hosted): When an unexpected runtime software error or JavaScript exception occurs, technical diagnostic details (error message, stack trace, browser version, page URL, and your application User ID) are sent to our secure backend servers to help us resolve bugs. This diagnostic data is processed on our own servers, contains no tracking cookies, is retained for a maximum of 15 days under an automated time-to-live (TTL) purge schedule, and is never shared with third-party tracking services.
• Bug Reports (Voluntary): If you choose to submit a bug report, your message, optional contact email address, and an optional snapshot of your local planner state (only if you keep the "Attach User Data" checkbox enabled) are sent to our support mail handler at clashcalc.com to help us diagnose the issue.

3. Use of Information

Any public game statistics, account credentials, diagnostic logs, or local planner configurations handled by the Service are used strictly to:

• Render your personal calculator configuration and upgrade logs.
• Authenticate your account sessions and protect against unauthorized access or account takeover.
• Synchronize your data across devices (only if you explicitly enable Cloud Sync).
• Diagnose software errors and resolve voluntary bug reports.

We do not use tracking cookies, we do not run advertising scripts, and we never share or sell any user information. We use privacy-first, cookie-free analytics strictly to measure aggregate site performance and pageviews.

4. Third-Party Integrations & Security

To populate your planner profile, protect against abuse, and monitor infrastructure health, we integrate with the following services:

• Clash of Clans API: Player tag requests are subject to Supercell's Fan Content Policy and Supercell's Terms of Service.
• API Proxies: To facilitate API request delivery and optimize operational costs, player tag queries may be routed through third-party proxy servers (such as coproxy.royaleapi.com). Connection data is subject to the respective proxy provider's Terms of Service and Privacy Policy.
• Cloudflare Web Analytics: We use Cloudflare Web Analytics to measure aggregate, non-personally identifiable pageviews and Core Web Vitals performance metrics. Cloudflare Web Analytics operates without tracking cookies, does not log or store personal IP addresses, and does not track users across third-party websites.
• Cloudflare Turnstile (Anti-Bot Protection): We utilize Cloudflare Turnstile on authentication and registration endpoints to protect against brute-force attacks, automated bot traffic, and credential stuffing. Turnstile evaluates challenge tokens without using tracking cookies, profiling users across sessions, or harvesting personal data.
• Identity Privacy: We do not collect or link personal real-world identities to Clash of Clans player profiles.

5. Your Data Rights & Deletion Tools

We align with EU GDPR, CCPA, and global privacy standards by providing comprehensive self-service data management tools directly inside the Settings tab under Account & Data Management, as well as through dedicated portals at Account Center and App Management:

• Data Backup & Restore: Export and download your entire application state as a JSON file at any time, or restore your configuration from a previous backup file.
• Clear Device Cache & Storage Audit: The App Management portal (/app-management/) allows you to inspect local cache partitions, audit offline asset storage, and wipe temporary cached responses without altering your persistent player configurations.
• Reset Village Data: Permanently resets local village progression, equipment levels, and unsynced calculations stored in your browser's localStorage.
• Delete All Data (Anonymous Cloud Sync): Permanently wipes all local browser data and deletes your synced backup profile and settings from our cloud servers.
• Delete Account (Registered Accounts): Provides an immediate, self-service deletion option (accessible via Settings or the Account Center at /account/) that permanently purges your registered account, removes your password hash and registered Passkeys, deletes all cloud-synced villages and configurations from our database, invalidates active session tokens, and places your identifier in a deletion ledger to ensure no orphaned data remains.

6. Contact Us

If you have questions about this policy or wish to discuss your privacy settings, contact us at legal@clashcalc.com.