Skip to content
RoyaleDeck

Privacy Policy

Last updated Oct 14, 2026

Who we are

  • RoyaleDeck (royaledeck.app) is run by the RoyaleDeck Team, based in Morocco. We decide how the data described here is used (we are the "controller"). To contact us about your data, email support@royaledeck.app.
  • RoyaleDeck needs no account. You can use every page without giving us your name or email address.

What we collect and why

  • Server data needed to run the site: your IP address and browser type. They protect the site from abuse (rate limits) and keep it working. Legal basis: our legitimate interest in running a secure site.
  • Unique view counts: when you open a guide or a deck, we count one view. To avoid counting you twice, the server keeps a one-way hash of your IP address, browser type and the date for one day, then deletes it. Only the total number of views is kept.
  • Usage statistics, only if you click Accept in the cookie banner: pages visited, device and browser type, approximate country and how you reached the site, measured with Google Analytics. Legal basis: your consent, which you can withdraw at any time.
  • Player and clan lookups: the tag you search is sent to the official Clash Royale API, and that player's public profile and battles are added to the battles we analyse. This is public game data published by Supercell, not data about you as a visitor.
  • Emails you send us: your address and message, kept only as long as needed to answer. Earlier sign-ups to the AI Coach waitlist (now closed) are kept until the launch email or until you ask us to delete them.
  • We do not sell your data, we do not show advertising, and we do not use advertising cookies.

Cookies and browser storage

  • royaledeck_session (cookie, strictly necessary): keeps the site working between pages. It expires after 2 hours of inactivity.
  • XSRF-TOKEN (cookie, strictly necessary): protects forms and tools against cross-site request forgery. Same lifetime as the session.
  • _ga and _ga_* (cookies, Google Analytics, only after Accept): tell visits apart to count visitors. They last up to 13 months. Reject keeps them off, and changing your mind deletes them.
  • rd-consent (browser storage): remembers your cookie choice so the banner does not ask again. It stays in your browser and is never sent to us.
  • rd-viewed:… (browser storage): remembers which guides and decks this browser has already counted, so a view is counted once. It holds no identifier and stays in your browser.
  • You can change your choice at any time with "Cookie settings" at the bottom of every page, and you can clear cookies and site storage in your browser settings.

Who processes data for us

  • Contabo GmbH hosts the site on a server in France (EU).
  • Google Ireland Limited runs Google Analytics for us, only after you accept. Advertising features, Google signals and ad personalisation are off. Google may process data in the United States under the EU-US Data Privacy Framework. See https://policies.google.com/privacy.
  • Game data comes from the official Clash Royale API (Supercell), reached through the RoyaleAPI proxy. Only player and clan tags are sent to it, never anything about you.
  • Fonts, images and scripts are served from our own domain: no other company receives your IP address when you open a page.

How long we keep data

  • Sessions: 2 hours after your last visit. View-count hashes: 1 day. Rate-limit counters: a few minutes.
  • Server error logs: 14 days. Database backups: 14 days. Battles: 62 days.
  • Google Analytics statistics: at most 14 months, then Google deletes them.

Your rights

  • You can ask for a copy of your data, its correction or deletion, object to how we use it, or withdraw consent. To do so, email support@royaledeck.app. We answer within one month.
  • If you are in the EU/EEA or the UK, you can also complain to your data protection authority.
  • If you are in California, you have the right to know what personal information we hold and to have it deleted. We do not sell or share personal information.
  • If you are in Morocco, your data is protected by Law 09-08, and you can also contact the CNDP (www.cndp.ma).

Children

  • RoyaleDeck is a general-audience site about a game played by all ages. We do not ask for personal details, and Google Analytics only runs if you accept it. If you are under 16, ask a parent before accepting analytics cookies.

Changes to this policy

  • When we change what we collect, we update this page and its date, and the cookie banner asks again if the change needs your consent.