Privacy Policy

Last updated: September 15, 2026

This policy explains what personal data this site processes, why, and the rights you have over it. It reflects the data flows of the site itself; features that are optional (such as creating an account) only process data if you choose to use them.

Data controller

The data controller for this site is Luca Scarpa. For any request regarding your personal data, contact [email protected].

Data we collect

Depending on how you use the site, we may process:

  • Account data (only if you sign up): email, name, and the profile picture provided by your login provider, your chosen language, and the Brawl Stars player tag linked to your account.
  • Session data: to keep you logged in we store a session token together with your IP address and browser user agent.
  • Login credentials: for email/password accounts, a hashed password (never the plain text); for Google or Discord sign-in, the authentication tokens issued by those providers.
  • Game data you request: the Brawl Stars player tags you track, and the trophy, ranked and battle-log history we record over time for them.
  • Technical cookies: a session cookie, plus small cookies storing your theme and language preferences.

Data about players without an account

To compute game statistics (tier list, counters, synergies) we collect every night the recent battles of the top 100 players of each European national leaderboard, through the official Supercell API. This is already-public game data identified by player tag: it requires no account on this site and is not linked to any user. It is kept for one year like the rest of the history; you can request its deletion at the address given at the bottom.

Why we process it and legal basis

Account and tracking data are processed to provide the service you request (Art. 6(1)(b) GDPR). Session data including IP address is processed on the basis of our legitimate interest in keeping accounts secure (Art. 6(1)(f)). We do not use your data for advertising or marketing profiling. We do not carry out automated decision-making producing legal effects concerning you. Personalised ads and advertising cookies instead rely on your consent (art. 6(1)(a) GDPR), which you can refuse or withdraw at any time without losing access to the site.

Third parties

To provide the service, data is shared with or fetched through:

  • RoyaleAPI proxy (bsproxy.royaleapi.dev) — every request to the official Supercell API passes through it.
  • Supercell — the official Brawl Stars API, source of player, club and battle data.
  • Cloudflare — the network serving this site: every request, including from visitors without an account, goes through its servers, which process IP address, user agent and requested URL. Cloudflare also provides the anti-bot check (Turnstile) on sign-up and email-and-password sign-in: during that step it receives the browser signals needed to tell a person from an automated program.
  • Google AdSense — the advertising network that serves the ads on this site. With your consent it processes device identifiers and advertising cookies to select and measure ads; without consent only non-personalised ads are shown. Ads also involve Google-certified advertising partners: the full, current list is in the consent banner, where you can accept or refuse them individually.
  • BSInfo, BrawlAPI and Brawlify — game statistics and images; when your browser loads images from their CDNs, your IP address is visible to them.
  • Google and Discord — only if you choose to log in with them, as authentication providers.

Transfers outside the EU

Some providers (Supercell, Google, Discord, Cloudflare) may process data on servers located outside the European Union. Those transfers rely on the safeguards each provider declares in its own policy: European Commission standard contractual clauses, adequacy decisions and, for Google, Discord and Cloudflare, the EU-U.S. Data Privacy Framework.

Data retention

Account and session data are kept while your account is active; deleting the account removes them. Game history (trophies, ELO and battles) is kept in raw form, linked to the player tag rather than to the account, and is automatically deleted after one year. If you delete your account, that history remains for computing statistics but is no longer linked to you.

Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • request deletion of your data;
  • restrict processing in certain cases;
  • receive your data in a portable format;
  • object to processing based on legitimate interest.
  • withdraw your consent to personalised ads at any time, by reopening the advertising preferences panel from the banner.
  • lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Cookies

This site uses technical cookies required to work (session, theme, language) and, with your consent, Google AdSense advertising cookies to select and measure ads. A banner appears on your first visit where you can accept or refuse: refusing still gives you the whole site, with non-personalised ads. You can change your mind at any time by reopening the advertising preferences panel from the banner.

Contact

To exercise any of your rights or ask questions about this policy, contact [email protected].