Privacy Policy

This Privacy Policy explains how ClanHQ(the “Service”) collects, uses, and protects your personal data. The Service is operated by:

For any privacy-related question or request, contact us at privacy@clanhq.app.

• Account data: email address, username, hashed password, date of registration, email verification status, and the timestamp when you accepted these terms.
• Wargaming account data: WG account ID, in-game nickname, region, clan membership and role — obtained when you link your account via Wargaming OAuth.
• Clan operational data: battle plans, lineup assignments, attendance records, recruitment candidates, notes, gold-payout records, absence declarations.
• Game statistics: tank ownership, battle statistics, win rates, synced from the Wargaming Public API.
• Payment data: subscription status, subscription tier, billing period. Card details are processed exclusively by Stripe and are never stored on our servers.
• Technical data: IP address (used for rate limiting only — not stored), and error logs via Sentry (with PII reporting disabled).
• Analytics: page views via Vercel Analytics — cookieless, with no personal identifiers collected.

• Providing the clan-management service you signed up for.
• Authenticating your account and verifying clan membership.
• Syncing game statistics from the Wargaming Public API.
• Processing subscription payments via Stripe.
• Sending transactional emails (verification, billing notices).
• Monitoring service errors and performance.

We do not sell your data to third parties. We do not use your data for advertising.

• Contract performance — providing the service you signed up for.
• Legitimate interests — security, fraud prevention, service improvement.
• Legal obligation — tax records and billing compliance.
• Consent — Wargaming account linking (revocable at any time).

• Active accounts: retained while the account is active.
• Deleted accounts: personal data deleted within 30 days of an account-deletion request.
• Payment records: retained for 7 years to comply with Romanian accounting law.
• Anonymised analytics: retained indefinitely.

• Right to access your data.
• Right to rectification.
• Right to erasure ("right to be forgotten").
• Right to data portability.
• Right to object to processing.
• Right to withdraw consent (e.g. unlink your Wargaming account).

To exercise any of these rights, email privacy@clanhq.app. We will respond within 30 days.

We rely on the following processors. Each has its own privacy policy linked below.

• Stripe — Payment processing — privacy policy
• Wargaming — Game data and OAuth authentication — privacy policy
• Railway — Backend hosting (EU — Amsterdam) — privacy policy
• Vercel — Frontend hosting and analytics — privacy policy
• Resend — Transactional email (EU — Ireland) — privacy policy
• Sentry — Error monitoring (EU region) — privacy policy
• Google Workspace — Business email — privacy policy

ClanHQ does not use tracking cookies. We use:

• Session authentication (httpOnly cookie) — strictly necessary to keep you logged in.
• Vercel Analytics — cookieless, with no personal data collected.

Because of this, no cookie consent banner is required.

Data is processed within the EU/EEA wherever possible. Vercel and Sentry may process data outside the EU; in those cases, transfers are governed by the European Commission's Standard Contractual Clauses.

Questions or requests: privacy@clanhq.app.

You also have the right to lodge a complaint with the Romanian data-protection authority ANSPDCP (anspdcp.ro).