Wistdroid

Privacy Policy

Effective date: October 5, 2026

This Privacy Policy explains how Clash O'Clock for Android, published by Wistdroid, handles information. Questions can be sent to dacaymat.polo@gmail.com.

Summary

Your village library stays on your device. Clash O'Clock does not upload village names, player tags, timers, plans, upgrade information, clipboard imports, or JSON backup files to Wistdroid or Supabase.

Information stored locally

The app stores the information you enter or import so its offline features can work:

Village names, nicknames, player tags, Town Hall and Builder Hall information
Timers, plans, upgrade progress, readiness status, and notification schedules
App preferences, tutorial status, theme selection, Bubble access time, and widget settings
Clipboard content only when you explicitly ask the app to import a Clash of Clans export
JSON backups that you explicitly export or import

Local information remains until you delete it, clear the app's storage, or uninstall the app. Android cloud backup and device-transfer backup are disabled for the app. Exported JSON files are controlled by you after they leave the app.

Google sign-in and account access

Signing in is optional. If you sign in with Google, Google and Supabase process authentication information including your account identifier, email address, display name, sign-in tokens, and session information. Clash O'Clock uses this information to authenticate you, display your account, and verify whether your account has Free or paid access.

Supabase stores your authentication account and server-managed entitlement information, such as subscription tier and expiration. It does not receive your local village library. The app stores its session on your device using Android Keystore encryption and disables authentication HTTP logging.

Anonymous access verification

The app also uses RevenueCat to verify access without requiring Google sign-in. RevenueCat assigns an anonymous customer identifier and processes entitlement information, including access tier and expiration, so the app can apply your access. The app does not send your Google account information or village library to RevenueCat.

If you redeem a private activation link, the app sends its activation token and anonymous RevenueCat customer identifier to a Supabase function. The function records redemption and grants the entitlement through RevenueCat. This access is separate from your optional Google/Supabase account.

Rewarded advertising

Free users may choose to watch a rewarded ad to unlock the floating Bubble for a limited time. Clash O'Clock uses Google Mobile Ads. Google may process information such as device or advertising identifiers, IP-derived approximate location, app and ad interactions, and diagnostic information to deliver, measure, secure, and personalize ads where permitted.

Google's handling of advertising data is described in the Google Privacy Policy and Google advertising policies. Live advertising will not be enabled until the consent and privacy controls required for the release are configured.

Optional Android access

Some functions require optional Android permissions or special access:

Display over other apps: shows the user-controlled floating Bubble.
Usage access: detects locally whether Clash of Clans is in the foreground when CoC detection is enabled.
Notifications and alarms: delivers timer and readiness reminders.
Network access: supports sign-in, entitlement verification, rewarded ads, and update or connectivity checks.

Usage events, clipboard imports, and village information are processed locally and are not sent to Wistdroid.

Sharing and sale of information

Wistdroid does not sell personal information. Information is shared only with service providers needed for the functions described above:

Google for Google sign-in and rewarded advertising
Supabase for authentication and entitlement verification
RevenueCat for anonymous access and entitlement verification

These providers process information under their own policies and contractual obligations.

Retention, security, and deletion

Account and entitlement information is retained while your account is active or as needed to provide and secure the service. Reasonable technical safeguards are used, including encrypted local sessions, access controls, and server-side entitlement rules. No method of storage or transmission can guarantee absolute security.

You can request permanent deletion of your account and associated server data on the account deletion page. Local village data must be deleted separately on each device because Wistdroid cannot access it.

Deleting your Google/Supabase account does not delete the separate anonymous RevenueCat customer record or its access grant. To request deletion of that record, contact Wistdroid at the email above; we may need information to identify the correct record.

Children

Clash O'Clock is not directed to children under 13. Users who have not reached the minimum age required in their country should use the app only with permission and supervision from a parent or legal guardian.

Changes to this policy

This policy may be updated when app features, service providers, or legal requirements change. The effective date above will be revised when changes are published.