Last updated: October 27, 2026
This policy explains what information is processed when you use ElixirDeck (elixirdeck.org, the “site”), why it is processed, and your rights. The site is free and requires no account. We never ask for your name, email address or password.
The site's owner, ElixirDeck, is the data controller under the EU General Data Protection Regulation (GDPR) and Turkey's Personal Data Protection Law No. 6698 (KVKK). For any privacy question or request: hello@elixirdeck.org
a) Player tag. When you use “Fetch my cards”, the Clash Royale player tag you enter is sent to our server. Our server uses it to retrieve your player name, card list, arena and currently selected deck from Supercell's official Clash Royale API, through RoyaleAPI's proxy server. When you use “Match Report”, your recent matches (both sides’ decks, card levels, crowns and wasted elixir) are retrieved the same way; your opponents’ names and tags are not sent to your browser. This is game data that Supercell already makes publicly available. Your card list, decks and matches are not stored in a database; only the name, tag, trophies and clan name of you and of the players seen in those matches are written to the player directory described in section (h) below. To reduce repeated requests for the same tag, the response may be kept in our hosting provider's cache for a few minutes.
b) Data stored in your browser. The cards you select, their levels, the evolutions and heroes you have unlocked, your evolution/hero slot setting, the last player tag you entered and your in-game name are kept in your browser's local storage (localStorage) so you don't have to enter them again. This data stays on your device and is never sent to us. You can remove it at any time by clearing site data in your browser settings.
c) Technical logs. The site is hosted and protected by Cloudflare, Inc. As with any website, technical information such as your IP address, browser details and the requested page may be logged for a short time by the hosting provider to deliver the page and keep it secure.
d) Card images. Card images are loaded from RoyaleAPI's servers (cdn.royaleapi.com), so your IP address is visible to that server when your browser downloads them.
e) “Open in game” links. The “Open in game” button opens Supercell's link.clashroyale.com. Supercell's own privacy policy applies there.
f) Visit statistics. To see which pages are used and improve the site, we use Cloudflare Web Analytics. When a page loads, this service records the page address, the site you came from, your browser and device type, the country derived from your IP address and how fast the page loaded, as aggregate statistics. It does not use cookies or local storage and does not recognize you across visits or across websites. We only see totals (e.g. how many times a page was viewed).
g) Language preference. When you open the home page (elixirdeck.org) or a shared deck link, our server uses your browser's language setting and the approximate country that Cloudflare derives from your IP address to open the page in your language. This information is used only for that redirect and is not stored. If you choose a language from the 🌐 menu or the language suggestion, your choice is remembered for 1 year in a cookie named lang (it only contains the language code, e.g. “en”). If you close the language suggestion, this is remembered in your browser's session storage (sessionStorage) until you close the browser.
h) Player name and tag directory. So that players can later be searched by their in-game name instead of their tag, we keep the in-game name, player tag, trophy count, clan name and the dates first and last seen of players who appear in the responses our server receives from the Clash Royale API, in our own database (Cloudflare D1). This includes players who enter their tag on the site and opponents who appear in match logs; match logs are read both for Match Reports and when our daily meta deck statistics are prepared (the top Ranked players worldwide and their matches). The directory may therefore also contain players who have never used the site. All of this information is already shown publicly by Supercell in the game and in its official API. No cards, matches, decks, IP addresses or device information are written to the directory, and the directory is not sold or shared with anyone. If a name changes, the record is updated; records not seen for 2 years are deleted automatically. If you want your record deleted and not added again, email hello@elixirdeck.org with your player tag.
To keep the site free, we show or may show advertising. For this we may use third-party advertising services such as Google AdSense.
For visitors from the European Economic Area, the United Kingdom, Switzerland and other regions where it is legally required, advertising cookies are used only after you give consent. You can withdraw your consent at any time. See our Cookie Policy for details.
ElixirDeck uses YouTube API Services only to upload the short videos it creates to its own YouTube channel (“Elixir Deck”). Visitors cannot connect a Google or YouTube account to the site; we do not access, collect, store or share any YouTube data of our visitors.
ElixirDeck uses TikTok’s Login Kit and Content Posting API only to send the short videos it creates as drafts to its own TikTok account (@elixirdeck7); we then review and post them in the TikTok app ourselves. Visitors cannot connect a TikTok account to the site; we do not access, collect, store or share any TikTok data of our visitors.
Our service providers may operate servers outside your country, including in the United States and the European Union: Cloudflare (hosting, database, security and visit statistics), RoyaleAPI (API proxy and images), Supercell (game data) and advertising providers. The information described above may therefore be transferred internationally, only to the extent necessary to provide the service and in line with applicable law.
Records in the player directory (name, tag, trophies, clan name) are deleted automatically 2 years after the player was last seen; we do not store card or match data in our own database. Cached responses expire within minutes. Technical logs and visit statistics are subject to the hosting provider's retention periods. Data in your browser remains on your device until you delete it; the lang cookie expires after 1 year.
Under the GDPR and KVKK you have the right to:
To make a request, write to hello@elixirdeck.org. We respond within 30 days.
The site is not directed at children under 13, and we do not knowingly collect personal information from children.
We may update this policy from time to time. The current version is always published on this page with the date at the top.