Privacy Policy

The data controller for this site is Luca Scarpa. For any request regarding your personal data, contact [email protected].

Depending on how you use the site, we may process:

• Account data (only if you sign up): the email and name provided by your login provider, your chosen language, and the Brawl Stars player tag linked to your account.
• Session data: to keep you logged in we store a session token together with your IP address and browser user agent.
• Login credentials: for email/password accounts, a hashed password (never the plain text); for Google or Discord sign-in, the authentication tokens issued by those providers. Those tokens may themselves contain profile data from the provider, such as your profile picture.
• Game data you request: the Brawl Stars player tags you track, and the trophy, ranked and battle-log history we record over time for them.
• Technical cookies: a session cookie, plus a small cookie storing your language preference.

To compute game statistics (tier list, counters, synergies) we collect every night the recent battles of the top 100 players of each European national leaderboard, through the official Supercell API. This is already-public game data identified by player tag: it requires no account on this site and is not linked to any user. It is kept for 60 days, like all battles; you can request its deletion at the address given at the bottom. The name, tag, profile icon and trophies of players already known to the site - those in this sample and those whose profiles have been viewed - also appear as suggestions in the search fields while typing a name or tag; a tag whose deletion or restriction has been requested is no longer suggested.

Account and tracking data are processed to provide the service you request (Art. 6(1)(b) GDPR). Session data including IP address is processed on the basis of our legitimate interest in keeping accounts secure (Art. 6(1)(f)). We do not use your data for advertising or marketing profiling. We do not carry out automated decision-making producing legal effects concerning you. Personalised ads and advertising cookies instead rely on your consent (art. 6(1)(a) GDPR), which you can refuse or withdraw at any time without losing access to the site.

To provide the service, data is shared with or fetched through:

• Supercell - the official Brawl Stars API, source of player, club and battle data.
• Cloudflare - the network serving this site: every request, including from visitors without an account, goes through its servers, which process IP address, user agent and requested URL. Cloudflare also provides the anti-bot check (Turnstile) on sign-up, email-and-password sign-in and submission of the support form (the last one open to visitors without an account too): during that step it receives the browser signals needed to tell a person from an automated program.
• Google AdSense - the advertising network that serves the ads on this site. With your consent it processes device identifiers and advertising cookies to select and measure ads; without consent only non-personalised ads are shown. Ads also involve Google-certified advertising partners: the full, current list is in the consent banner, where you can accept or refuse them individually.
• Google and Discord - only if you choose to log in with them, as authentication providers.
• Telegram - the channel the site maintainer uses to receive technical alerts. When you send the support form, an extract of your message (the first 300 characters), along with the request number and category, is forwarded as a Telegram notification; your email address is never included in it and is only read in the private management panel.

Some providers (Supercell, Google, Discord, Cloudflare, Telegram) may process data on servers located outside the European Union. Those transfers rely on the safeguards each provider declares in its own policy: European Commission standard contractual clauses, adequacy decisions and, for Google, Discord and Cloudflare, the EU-U.S. Data Privacy Framework. Telegram declares none of those mechanisms: forwarding the support notification outside the Union therefore relies on Art. 49(1)(a) GDPR (explicit consent), which you give by submitting the form after reading this policy, and covers only the extract described above.

Account and session data are kept while your account is active; deleting the account removes them. Game history is kept in raw form, linked to the player tag rather than to the account, under two different periods: trophies and ELO are automatically deleted after one year, battles after 60 days. Support requests follow a different period, 24 months from submission, deleted automatically once it elapses or immediately if you delete the linked account. If you delete your account, game history remains for computing statistics but is no longer linked to you.

If you use the support form we collect the email address you provide, the message text, the page you sent it from and your browser's user agent; if you're logged in, also your account id. We process this to answer your request. Your IP address is not recorded: it's only used for a short-lived anti-abuse rate limit and never reaches the database. We keep support requests for 24 months from submission; if you delete your account, the requests linked to it are deleted along with it.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• request deletion of your data;
• restrict processing in certain cases;
• receive your data in a portable format - if you have an account you can download them yourself at any time, from the “Download my data” button on your account page;
• object to processing based on legitimate interest.
• withdraw your consent to personalised ads at any time, by reopening the advertising preferences panel from the banner.
• lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (www.garanteprivacy.it).

If you live in a U.S. state that grants specific rights over personal data - California, Virginia, Colorado, Connecticut, Utah and others - the following protections apply to you as well. We grant them regardless of the size thresholds at which each of those laws starts to apply:

• We do not sell your personal data for money. Personalised advertising does, however, involve sharing device identifiers and cookies with Google and its advertising partners: Californian law calls this “sharing” for cross-context behavioural advertising, and other state laws call it “targeted advertising”.
• You can refuse or withdraw that sharing at any time from the advertising preferences panel, which reopens from the consent banner. Refusing counts as an opt-out request: you will still see ads, but not personalised ones.
• You can ask what personal data we hold about you, receive a copy of it, and have it corrected or deleted by writing to [email protected]; if you have an account, you can also delete it yourself from your account page. We reply within 45 days. If we turn a request down, you can ask us to review that decision at the same address.
• We do not knowingly collect personal data from anyone under 16, and we do not sell or share for advertising the data of anyone we know to be under 16. If we find we have collected any, we delete it.
• Exercising these rights costs you nothing: the site stays fully available, with the same features, whether you refuse personalised ads or ask for your data to be deleted.

This site uses technical cookies required to work (session, language) and, with your consent, Google AdSense advertising cookies to select and measure ads. A banner appears on your first visit where you can accept or refuse: refusing still gives you the whole site, with non-personalised ads. You can change your mind at any time by reopening the advertising preferences panel from the banner.

To exercise any of your rights or ask questions about this policy, contact [email protected].