Privacy Policy

Last updated: 05.10.2026

1. Controller

Dubowskich & Kügele GbR
Ständlerstraße 59
81549 München
Deutschland
Email: support@coachroyale.cloud

2. Scope

This policy informs you about the processing of personal data when using the CoachRoyale app (account, decks, settings, and optional analytics/marketing features where consented).

3. Categories of data

• Account data: email, password (hashed via auth provider), username, optional profile image
• Usage data: app settings (language, theme), saved decks and related metadata
• Coach questions and feedback (only with analytics consent): if the coach cannot answer a question, a shortened version (max. 80 characters, without numbers, player tags or e-mail addresses) is sent with the analytics events; a 👍/👎 rating sends the answer type (and for 👎 the shortened question). This helps us improve the coach.
• Coach data on your device: chat history (up to 60 messages, max. 14 days), suggestion statistics, progress snapshots of your battle stats and the gold, gems and shop prices you tell the coach are stored only locally. Signing out deletes the chat history and statistics; deleting your account deletes all coach data and your stored player tag.
• Player tag and game data (optional): if you enter your Clash Royale player tag, it is stored on your device and sent to our server to fetch your public player profile, card levels and battle log from Supercell (see section 6).
• Error reports (only with analytics consent): if an error or crash occurs in the app we send a technical report: error message, technical stack trace, the affected screen, operating system and – if you are signed in – your user ID. For coach errors the report also contains the shortened question (max. 80 characters, without numbers, player tags, e-mail addresses and links). Without a login, a hash of your IP address that changes daily (never the address itself) is stored to limit abuse.
• Technical data: device/app identifiers required for secure operation
• Consent data: cookie / tracking preferences

4. Purposes and legal bases (GDPR Art. 6)

• Contract / pre-contractual steps (Art. 6(1)(b)): registration, login, providing coaching features
• Legitimate interests (Art. 6(1)(f)): security, abuse prevention, basic product improvement
• Consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG): non-essential cookies/SDKs for analytics (including error reports) and marketing
• Legal obligation (Art. 6(1)(c)): where retention is required by law

5. Recipients / processors

We use service providers that process data only under instructions (Art. 28 GDPR): Supabase (authentication, database, storage), Cloudflare (routing and protection of network traffic), IONOS (server through which requests to Supercell run) and Google (advertising, see section 7). Processing takes place primarily in the EU/EEA; for third-country transfers, appropriate safeguards (standard contractual clauses under Art. 46 GDPR) are used.

6. Player data and data of other players

Player data: for "My levels", statistics and the coach we use the player tag you enter to fetch public game data (profile, card levels, battle log) from Supercell's official Clash Royale interface. The request runs through our server; the response is cached there for a few minutes at most and not stored permanently. For faster display, data is also cached on your device.

Data of other players: if you ask the coach about another player (by player tag), we fetch their publicly visible game data (name, tag, trophies, clan, current deck, river race activity) from Supercell and show it only to you. We do not store it permanently. The legal basis is Art. 6(1)(f) GDPR (providing the requested information from publicly available data). Affected players can object under Art. 21 GDPR (contact: section 13).

7. Advertising via Google AdMob

To keep the app free, we show ads via Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google processes, among other things, the device advertising ID, IP address, device and app information and interactions with ads (impressions, clicks) to deliver ads, cap their frequency, prevent fraud and measure reach. Personalised ads are shown only with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which we obtain via Google's consent dialog (UMP, IAB TCF) and our marketing toggle. Without consent we show non-personalised or limited ads; Google may still process data for delivery, frequency capping and fraud prevention. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework and additionally uses standard contractual clauses. You can change your choice at any time under Settings → Privacy settings and reset or delete the advertising ID in your device settings. More information: https://policies.google.com/technologies/ads

8. Retention

Account data is stored during active use. After account deletion we erase or anonymise the data unless longer retention is required by law. Error reports are kept as long as needed for error analysis; when you delete your account, the link to your user ID is removed. Consent records are kept as long as necessary to demonstrate compliance.

9. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority; for us this is the Bavarian Data Protection Authority (BayLDA).

10. Cookies and similar technologies

Essential technologies are required for login and security. Analytics and marketing tools are used only with your consent. You can change your choice anytime under Settings → Privacy settings.

11. No automated decision-making

There is no solely automated decision-making that produces legal or similarly significant effects (Art. 22 GDPR).

12. Children / age

CoachRoyale is not directed at children under 16. We do not knowingly collect personal data from children under 16 for marketing. If you believe a child has provided data, contact us and we will delete it where required. Analytics and personalised advertising run only with consent. Ads are requested with a maximum content rating of "Teen" (T).

13. Contact

Privacy requests: support@coachroyale.cloud

Security reports: support@coachroyale.cloud (subject: Security)

CoachRoyale is an unofficial fan project and is not affiliated with Supercell.