Privacy Policy
This Privacy Policy explains how the Smash&Clash game (the “Game,” “we,” “us”) handles information when you play it on the web at www.smashandclash.in or through our mobile and desktop app editions. Smash&Clash is the official digital edition of the Smash&Clash strategic card-battle game.
1. Information we handle
Smash&Clash is designed to be playable with no sign-up. The information involved depends on how you choose to use the Game:
a. Information you can play without giving us
The core single-player experience (versus the AI opponent), the local hotseat two-player mode, the tutorial, and mutators mode all run entirely on your device. You do not need to create an account, and we do not require your name, email, or any personal identifier to play.
b. Optional account information (only if you sign in)
If you choose to sign in — for example, to use online play or to keep an identity across devices — authentication is handled by our identity provider, Clerk. In that case we receive a limited account profile:
- a unique user ID;
- your chosen username or display name;
- your profile image, if you set one; and
- your primary email address.
Signing in is entirely optional. If you never sign in, none of this information is collected.
c. Online play / connection data
When you use online multiplayer, technical connection data is processed to set up and maintain the peer-to-peer match — including network/IP address information and lobby or room codes. See Online multiplayer & WebRTC below.
d. Usage & diagnostic data
On the production website we use privacy-friendly, aggregated analytics (Vercel Web Analytics) to understand overall traffic — such as page views and approximate referrer/region — without cookies and without tracking you across other sites. This data is aggregated and is not used to identify you. If you report a problem or send feedback, we receive the information you choose to include in that report.
e. Feedback you send us
The Game may offer optional feedback forms (powered by Tally). Anything you submit is voluntary. If you are signed in, your email address may be pre-filled to help us follow up — you can edit or remove it before sending.
2. How we use information
We use the limited information described above only to:
- provide and run the Game and its features;
- enable optional sign-in and keep your identity consistent across devices;
- set up and maintain online multiplayer matches between players;
- measure overall usage so we can improve performance and gameplay;
- respond to feedback, support requests, and bug reports; and
- maintain the security and integrity of the Game and prevent abuse.
We do not use your information for advertising, profiling, or automated decision-making that has legal or similarly significant effects on you.
3. Third-party services
We rely on a small number of reputable service providers to operate the Game. Each processes data only as needed to provide its service and under its own privacy policy:
| Service | Purpose | Data involved | Privacy policy |
|---|---|---|---|
| Vercel | Website hosting & privacy-friendly, cookieless analytics | Standard server logs; aggregated, anonymous usage metrics | View |
| Clerk | Optional account sign-in & authentication | User ID, username, profile image, email (only if you sign in) | View |
| Supabase | Realtime signaling for online multiplayer matchmaking | Transient lobby/room codes and connection-setup messages | View |
| Tally | Optional feedback & contact forms | Only what you voluntarily submit | View |
| Google Play | App distribution (mobile edition) | Install/usage data handled by Google per its policy | View |
Character voices in the Game are pre-generated audio assets created with ElevenLabs and shipped with the Game; producing them does not involve any of your personal data.
4. Online multiplayer & WebRTC
Online matches use WebRTC, a standard peer-to-peer technology, so game moves travel as directly as possible between the two players. To establish a connection, a signaling service (Supabase Realtime) exchanges short setup messages and a room code. As is inherent to all WebRTC connections, your network/IP address may become visible to the peer you are connected with so that the direct link can be formed. We do not use this for tracking, and signaling messages are transient — they are not retained as a permanent record of your gameplay.
5. On-device storage
The Game stores your settings and preferences (such as audio, accessibility, and input options) locally on your device using your browser’s local storage. This data stays on your device, is not sent to us, and you can clear it at any time by clearing your browser/app storage for the Game. We do not use advertising or cross-site tracking cookies.
6. Advertising & selling of data
Smash&Clash contains no third-party advertising. We do not sell or rent your personal information, and we do not share it with data brokers or advertising networks.
7. Children’s privacy
Smash&Clash is a family-friendly card-battle game suitable for general audiences. The Game is not directed to children under the age of 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from children. The core game can be played without any account or personal information. If you are a parent or guardian and believe a child has provided us with personal information (for example, by signing in), please contact us and we will delete it.
8. Data retention
We keep information only for as long as needed for the purposes described here. Online signaling messages are transient and discarded when a match ends. Aggregated analytics are retained in non-identifying form. Optional account data is retained by Clerk for as long as your account exists; deleting your account removes it. Feedback you submit is kept for as long as needed to address it.
9. Your rights & choices
Depending on where you live (for example, under the GDPR, the UK GDPR, India’s DPDP Act, or the CCPA/CPRA), you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. Because most players never create an account, in many cases we hold no personal information about you. You can exercise your choices by:
- playing without signing in (no personal information is collected);
- managing or deleting your optional account at any time from the in-game account settings (handled by Clerk); and
- emailing us at the address below to request access to or deletion of any information we hold about you.
We will respond to verified requests within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data-protection authority.
10. Security
We use industry-standard safeguards, including encryption in transit (HTTPS/TLS), and rely on established providers (Vercel, Clerk, Supabase) for hosting and authentication. No method of transmission or storage is completely secure, but we work to protect your information and limit what is collected in the first place.
11. International data transfers
Our service providers may process data on servers located in countries other than your own. Where required, these providers maintain appropriate safeguards for international transfers under their respective privacy programs.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and post the new version at this URL. Material changes will be highlighted within the Game where appropriate. Your continued use of the Game after an update means you accept the revised policy.
13. Contact us
If you have any questions, requests, or concerns about this Privacy Policy or your information, contact us at:
Email:
support@smashandclash.in
Website:
www.smashandclash.in
This policy applies to the Smash&Clash web edition and its mobile (Google Play) and desktop app editions, which share the same codebase and data practices.