Data Controller
The data controller is Teknistore Co. Ltd., a company incorporated in Hong Kong, Rooms 1318-19, Hollywood Plaza, 610 Nathan Road, Mongkok, Kowloon, Hong Kong.
For any privacy-related request, please contact us at: info@clashpop.app
Data We Collect
In connection with your use of the ClashPop app, we collect the following categories of data:
| Category | Details | Source |
|---|---|---|
| Account data | Display name, email address, profile picture | Google / Apple login |
| Game data | Scores, matches played, 1v1 results, progression | In-app activity |
| Purchase data | In-app purchase history (no payment data) | Google Play / App Store |
| Technical data | Device type, operating system, app version, language | Automatic |
| Analytics data | Sessions, usage events, crash reports | Firebase / Google Analytics |
Purposes of Processing
Your data is processed for the following purposes:
- Providing the online gaming service and managing your user account
- Managing real-time 1v1 matches and leaderboards
- Processing and verifying in-app purchases
- Analysing app performance and fixing technical errors
- Improving the gaming experience through aggregated and anonymised data
- Customer support in response to specific requests
- Compliance with applicable legal obligations
Legal Basis for Processing
The processing of your data is based on the following legal grounds:
- Contractual performance — to deliver the requested service (Art. 6.1.b GDPR)
- Legitimate interest — for analytics, security and service improvement (Art. 6.1.f GDPR)
- Legal obligation — where required by applicable law (Art. 6.1.c GDPR)
- Consent — for optional promotional communications (Art. 6.1.a GDPR)
Although Teknistore Co. Ltd. is based in Hong Kong, the app is available to users in the European Union; we therefore commit to complying with Regulation (EU) 2016/679 (GDPR).
Third-Party Services
We use the following third-party services to operate the app, each with its own privacy policy:
- Google Firebase — authentication, real-time database, analytics and crash reporting. Firebase Privacy Policy →
- Google Analytics for Firebase — statistical analysis of app usage. Google Privacy Policy →
- Google Sign-In — authentication via Google account.
- Sign in with Apple — authentication via Apple account. Apple Privacy Policy →
- Google Play Billing / App Store — in-app purchase management.
We do not sell, rent or disclose your personal data to third parties for marketing purposes.
Data Retention
Data is retained for no longer than necessary for the purposes for which it was collected:
- Account and game data — until the account is deleted by the user
- Analytics data — up to 14 months, per Firebase/Google Analytics default settings
- Purchase data — retained in accordance with applicable fiscal and accounting obligations (generally 10 years)
- Technical logs and crash reports — up to 90 days
At the end of the retention period, data is permanently deleted or irreversibly anonymised.
Your Rights
You have the right to:
- Access — obtain confirmation of processing and a copy of your data
- Rectification — correct inaccurate or incomplete data
- Erasure — request the deletion of your data ("right to be forgotten")
- Restriction — limit processing in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdrawal of consent — at any time, without affecting the lawfulness of prior processing
To exercise your rights, write to info@clashpop.app. We will respond within 30 days of receiving your request.
Children
ClashPop is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at info@clashpop.app: we will promptly delete it.
Data Transfers
Your data may be transferred to and processed in countries outside the European Union, including Hong Kong and Google's data centres (USA and other regions). Such transfers are carried out in compliance with the safeguards required by the GDPR, in particular through the Standard Contractual Clauses adopted by the European Commission and implemented by our service providers.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include:
- Data transmission encrypted via TLS/HTTPS
- Access to data restricted to authorised personnel
- Use of Firebase's native security features
- Continuous monitoring to detect anomalies and incidents
No system is infallible: in the event of a breach that poses a high risk to your rights, we will notify you in the manner and within the timeframes required by applicable law.
Account Deletion
Users may request the deletion of their account and all associated data by sending an email to the following address: info@clashpop.app
Subject: Account Deletion Request – ClashPop
Body: Please include the Google email address associated with your ClashPop account.
Upon receiving your request, we will permanently delete your account and all associated data (game history, XP, profile information) within 30 days.
Changes to This Privacy Policy
We reserve the right to update this policy at any time. Material changes will be communicated via an in-app notification or a notice on the landing page at least 15 days before they take effect.
Continued use of the app after changes take effect constitutes acceptance of the updated policy.
The latest version will always be available at clashpop.app/privacy.html.