Privacy

What stays in your browser

Everything you enter is saved in your browser's local storage on this device only. That includes:

• your village exports and the import history built from them
• the names you give your villages
• Gold Pass boost settings
• each village's rushing standard, core defense choices and army
• your ore plan for equipment upgrades
• appearance (light or dark mode, palette, header glow) and display choices such as hiding maxed upgrades or the categories counted on the storage page
• clipboard settings: automatic import and the import button
• the plans you have shared, with the keys that let you delete them
• device sync credentials, if you have linked devices

None of this is sent anywhere unless you enable device sync, share a plan or send a suggestion, described below. Clearing your browser data removes it, and so does Clear all data in Manage.

Your clipboard

The village export is the only way building levels and timers reach this app, so Stats Tracker looks for one on your clipboard: when you paste anywhere in the app, when you press Paste update, and when a tab regains focus if your browser has already granted clipboard access. Firefox and Safari never grant that standing access, so on those browsers only the paste and the button do anything.

What it finds is checked in your browser and discarded unless it is a village export, which is then saved exactly like one you pasted by hand. Nothing read from the clipboard is sent anywhere. Turn the whole thing off, or just the Import button that appears when you come back to the tab, in Manage → Clipboard.

No accounts, cookies or analytics

You never sign in, and the site does not set cookies. There is no analytics script, advertising, fingerprinting or third-party tracking of any kind.

Optional device sync

Device sync is off until you link a second device with a QR code or a link. Each code or link expires after ten minutes and works once. When sync is on, your browser encrypts a snapshot of your saved villages, their names, Gold Pass settings, rushing standards, core defenses, armies and ore plans with AES-GCM before uploading it. The key lives only on your linked devices; the server never sees it and cannot read the contents.

Alongside the encrypted snapshot, each device sends its device name and checks in about every 15 minutes, which is the last-seen time you see in Manage. This metadata is stored in Cloudflare D1 and is visible to the site operator. The village data inside the snapshot is not.

Sync groups that have not been touched by any device for 180 days are deleted from the server. You can disconnect any time from Manage → Devices; that removes this device's credentials locally, and your other devices keep their own copies. Removing a village while synced removes it from linked devices too.

Shared rush plans

Sharing a custom rush plan uploads it to the server so the link works for anyone. A plan holds only what you see in the share window: its name and optional note, the Town Hall it was made at, the rushing standard, the chosen defenses and their target levels, and the army. It carries no village tag, device or account details.

Anyone with the link can open the plan and its preview image. Links are random, never listed anywhere, and plan pages ask search engines not to index them.

You can delete a plan from the browser that shared it, on the plan's page or in Manage → Shared plans. The link stops working straight away; the preview image can linger in caches for up to a day, and chat apps keep their own copies of previews already posted. That browser holds the only key, so if you clear its data, or the plan was shared before deleting was possible, ask through the suggestions box and it will be removed.

Suggestions

The suggestions box in Manage forwards your message, the name and contact details you choose to add (both optional), and your village tag to the site operator through Telegram. Nothing else from your browser is included. Use it if you want to ask about, correct or remove anything described on this page.

Third parties

• Cloudflare hosts the site, stores encrypted sync snapshots, device metadata and shared plans, and draws plan preview images (with Cloudflare Images). Like any host, Cloudflare sees ordinary request details such as IP addresses. The app uses your IP address only to rate-limit sync, sharing and suggestions and does not store it; short-lived request logs are available to the operator for fixing problems.
• Telegram delivers suggestions to the operator.
• ClashKing CDN and Supercell's game asset CDN serve building, troop and resource images. Your browser requests these directly, so those services see the same request details as any image on any website.
• Links you choose to open go to other sites only when you tap them: Live stats opens your player on War Report, and an upgrade reminder can open Google Calendar with the upgrade and village name filled in. The calendar file option is made on your device and sends nothing.

Your data is never sold or shared for advertising.

Contact

Questions about privacy go through the suggestions box.