Privacy Policy

Last updated: 27.10.2026

1. Controller

Dubowskich & Kügele GbR
Ständlerstraße 59
81549 München
Deutschland
Email: support@coachroyale.cloud

2. Scope

This policy informs you about the processing of personal data when using the CoachRoyale app (account, decks, settings, and optional analytics/marketing features where consented).

3. Categories of data

4. Purposes and legal bases (GDPR Art. 6)

5. Recipients / processors

We use service providers that process data only under instructions (Art. 28 GDPR): Supabase (authentication, database, storage), Cloudflare (routing and protection of network traffic), IONOS (server through which requests to Supercell run) and Google (advertising, see section 7). Processing takes place primarily in the EU/EEA; for third-country transfers, appropriate safeguards (standard contractual clauses under Art. 46 GDPR) are used.

6. Player data and data of other players

Player data: for "My levels", statistics and the coach we use the player tag you enter to fetch public game data (profile, card levels, battle log) from Supercell's official Clash Royale interface. The request runs through our server; the response is cached there for a few minutes at most and not stored permanently. For faster display, data is also cached on your device.

Data of other players: if you ask the coach about another player (by player tag), we fetch their publicly visible game data (name, tag, trophies, clan, current deck, river race activity) from Supercell and show it only to you. We do not store it permanently. The legal basis is Art. 6(1)(f) GDPR (providing the requested information from publicly available data). Affected players can object under Art. 21 GDPR (contact: section 15). Clan war overview: for your clan the same interface returns publicly visible war data (names and tags of clan members, decks played per week and day, and evaluations of them), which we show only to you; on the server it is cached for a few minutes at most and not stored permanently. The war clock (day and time left) and your alert settings are kept only on your device; the alerts are local notifications of your device and can be switched off at any time. The legal basis is Art. 6(1)(f) GDPR; affected people can object as described above.

7. Advertising via Google AdMob

To keep the app free, we show ads via Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google processes, among other things, the device advertising ID, IP address, device and app information and interactions with ads (impressions, clicks) to deliver ads, cap their frequency, prevent fraud and measure reach. If you are signed in and watch a reward video, we also send your user ID (a random identifier, not your name or e-mail address) to Google; Google returns it with its confirmation to our server so we can credit the reward to the right account and prevent abuse (Art. 6(1)(b) GDPR). Personalised ads are shown only with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which we obtain via Google's consent dialog (UMP, IAB TCF) and our marketing toggle. Without consent we show non-personalised or limited ads; Google may still process data for delivery, frequency capping and fraud prevention. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework and additionally uses standard contractual clauses. You can change your choice at any time under Settings → Privacy settings and reset or delete the advertising ID in your device settings. More information: https://policies.google.com/technologies/ads

8. Retention

Account data is stored during active use. After account deletion we erase or anonymise the data unless longer retention is required by law. Error reports are kept as long as needed for error analysis; when you delete your account, the link to your user ID is removed. Consent records are kept as long as necessary to demonstrate compliance.

9. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority; for us this is the Bavarian Data Protection Authority (BayLDA).

10. Cookies and similar technologies

Essential technologies are required for login and security. Analytics and marketing tools are used only with your consent. You can change your choice anytime under Settings → Privacy settings.

11. No automated decision-making

There is no solely automated decision-making that produces legal or similarly significant effects (Art. 22 GDPR).

12. Children / age

When you first open CoachRoyale we ask for your year of birth. We store only the year, on your device, and use it only to decide which features may be used. Under 16: analytics and personalised advertising are switched off and cannot be enabled; ads are requested as for users under the age of consent. Under 13: in addition, no account can be created, and ads are requested as child-directed with the strictest content rating. The rest of the app (coach, deck tools, builders, mini games) works without an account. We do not knowingly collect personal data from children under 13. If you believe a child has provided data, contact us and we will delete it where required. For users aged 16 and over, analytics and personalised advertising run only with consent. Ads are requested with a maximum content rating of "Teen" (T).

13. Users in the United Kingdom and Switzerland

CoachRoyale can also be used in the United Kingdom and Switzerland. The provider named above in Germany remains the controller there, and data is processed primarily in the EU/EEA (see section 5). For users in the United Kingdom the UK GDPR and the Data Protection Act 2018 apply in addition; for users in Switzerland the Swiss Federal Act on Data Protection (FADP) applies. The rights in section 9 apply there accordingly (access, rectification, erasure, restriction, data portability, objection). You can complain to us or to the competent authority: in the United Kingdom the Information Commissioner’s Office (ico.org.uk), in Switzerland the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).

14. Users in the United States and Canada

CoachRoyale can also be used in the United States and Canada. The provider named above in Germany is responsible for your data, and it is processed primarily in the EU/EEA (see section 5). The following applies in addition where US state privacy laws (for example California, CCPA/CPRA) or Canadian privacy law (PIPEDA and provincial laws) apply to you.

Categories of data: identifiers (e-mail address, user ID, hashed IP address for abuse protection), internet and app activity (usage events and error reports, only with consent), and device and advertising data processed by Google AdMob; with reward videos Google also receives the user ID of signed-in users (see section 7). Sources: you, your device, and the Supercell API for the player tag you enter. Purposes: providing the app, security, and – only with your consent and only for users aged 16 and over – analytics and advertising (see sections 4 and 7).

We do not sell personal data for money. If you turn on "Marketing" in the privacy settings, Google AdMob may receive device and advertising identifiers to show personalised ads; this can count as "sharing" for cross-context behavioural advertising under some US state laws. You can stop this at any time: turn off "Marketing" under Settings → Privacy settings (this is your opt-out), or open "Ad consent (Google)" in the same place and choose "Don’t sell or share my data" (shown where US state laws apply), or reset your advertising ID in your device settings. You will still see ads, but they are not based on your interests. We do not use sensitive personal data to infer characteristics about you, and users under 16 are never opted in to sharing.

Your rights: depending on where you live you may request access to, a copy of, correction of and deletion of your personal data, and to know which categories we collected and why. We will not treat you worse for exercising these rights. Signed-in users can delete their account in the app (Settings → Manage account); you can also write to us (section 15). We will reply within 45 days (30 days in Canada where required); if we need to verify a request we will ask for details tied to your account. In Canada you can also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or to a provincial authority. You may use an authorised agent to submit a request.

Data transfers: your data is processed in the EU/EEA, where the GDPR applies. By using the app from the United States or Canada you accept that your data is transferred to and processed there.

15. Contact

Privacy requests: support@coachroyale.cloud

Security reports: support@coachroyale.cloud (subject: Security)

CoachRoyale is an unofficial fan project and is not affiliated with Supercell. This material is unofficial and is not endorsed by Supercell. For more information see Supercell's Fan Content Policy: www.supercell.com/fan-content-policy.