Chính sách bảo mật

Effective date: July 20, 2026  ·  Last updated: October 2, 2026

This Privacy Policy describes how we (“we”, “us”, or “our”) collect, use, and share information when you use the “Service”, which includes:

• Our website at https://cocmap.com (clasher.us redirects here) and related pages (branded as Clasher.us / CoCMap.com); and
• All mobile applications published by phuocly on Google Play that link to or display this Privacy Policy; and
• All mobile applications published by Lam Nguyen on the Apple App Store that link to or display this Privacy Policy.

You do not need a separate privacy policy URL per app. Any app that points to this page is covered by this Privacy Policy. By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

Clasher.us and our game companion apps are unofficial fan projects and are not affiliated with, endorsed, sponsored, or specifically approved by Supercell. Supercell is not responsible for the operation or content of this Service. See Supercell’s Fan Content Policy.

1. Who we are

The Service is operated as follows:

• Website (CoCMap.com): operated at cocmap.com (clasher.us redirects here).
• Google Play apps: published by the developer phuocly (Play developer page).
• Apple App Store apps: published by the developer Lam Nguyen (App Store developer page).

Apps covered by this policy include, among others:

• Clash of Clans companion apps (for example CoC Maps / Clash of Clans Toolkits) — base layouts, maps, and tools;
• Clash Royale & Brawl Stars companion apps (for example Clasher / Clash Royale Toolkit) — decks, cards, brawlers, player and clan lookup;
• RouterKit — a network and Wi-Fi router utility (for example finding your router, opening its admin page, viewing Wi-Fi/network details, and scanning devices on your local network);
• Any other app from the developers above that links to this page.

For privacy questions about any covered app or the website, contact us at [email protected].

2. Information we collect

We collect only what we need to run and improve the Service. Not every app uses every item below; what applies depends on the app and the features you use.

2.1 Information you provide

• Support messages. If you email us, we receive your email address and the content of your message.
• Account data (website only, if you register). If you create an account on cocmap.com, we may store credentials and profile details you submit (such as username and email). Our mobile apps do not require an account to use core features.
• Search input. When you look up a player tag, clan tag, or search content in a game companion app, that query is sent to our server to return results.

2.2 Information collected automatically

• Usage and device data. Pages or screens viewed, referral source, language, device type, operating system, app version, and general interaction events.
• App instance identifier. Some apps generate a random identifier on install (not linked to your name or email) and send it with requests to our API, for example to register push notifications and remember notification preferences.
• Push notification token. If you allow notifications, the app receives a Firebase Cloud Messaging (FCM) / Apple Push Notification service token, which we store with your app language and notification preferences so we can send notifications (such as game updates or new content). You can turn notifications off at any time in system settings.
• Advertising identifiers. Apps with ads may access the Android Advertising ID or Apple IDFA (on iOS only if you allow tracking through the App Tracking Transparency prompt).
• Crash and diagnostic data. When an app crashes or encounters an error, Firebase Crashlytics collects crash reports, stack traces, device model, OS version, app version, a Crashlytics installation identifier, and timestamps so we can fix bugs.
• Log data. Our servers and providers may log IP address, request time, and user agent to operate and secure the Service.
• Cookies and similar technologies (website). We use cookies and local storage for essential site functions (for example language, theme, session/security, and cookie consent preferences) and, with your consent where required, for analytics and advertising.

2.3 Device permissions

Some apps ask for device permissions. Each permission is requested only when a feature needs it, and you can deny or revoke it in your device settings at any time (the related feature may then stop working).

• Location (RouterKit). Android and iOS only reveal the name of the connected Wi-Fi network (SSID/BSSID) to apps that have location permission. RouterKit requests location permission only to read the current Wi-Fi network details. We do not use it to track where you are, and we do not send your GPS location to our servers or to advertisers.
• Local network (RouterKit). RouterKit requests local network access (the iOS “Local Network” permission; network/Wi-Fi state access on Android) to find your router, open its admin page, and discover devices connected to the same network. Information found on your local network (such as router address, device names, IP and MAC addresses) is processed on your device and is not uploaded to our servers.
• Notifications. Used to deliver push notifications if you opt in.
• App Tracking Transparency (iOS). Used to ask your permission before the IDFA is used for personalized advertising.
• Photos / storage (save or share images, where available). Used only to save or share an image you choose (for example a base layout or deck). We do not access your other photos.

We do not access your contacts, microphone, camera, calendar, or precise location for advertising.

2.4 Data stored only on your device

Many app features save data locally on your device (for example in app storage) and this data is not sent to our servers, including:

• Favorites, saved layouts, saved decks, and custom names;
• Recent searches and browsing history inside the app;
• RouterKit history, such as previously used router addresses, scan results, and network test results;
• Settings such as theme, language, and notification or rating-prompt preferences.

You can clear this data from inside the app (where an option is provided), by clearing the app’s data in system settings, or by uninstalling the app. Because we do not receive this data, we cannot restore it for you.

2.5 In-app purchases

Some apps offer optional in-app purchases or subscriptions (for example to remove ads or unlock premium features). Payments are processed entirely by Google Play or the Apple App Store. We do not receive or store your card number, billing address, or other payment details. The app receives purchase information from the store (such as product ID, purchase status, transaction or order ID, purchase token, and date) to unlock and restore your purchase, and may verify it with the store. Refunds and billing questions are handled under the policies of Google Play or Apple.

2.6 Information we do not intentionally collect

We do not ask for your Clash of Clans, Clash Royale, Brawl Stars, or other Supercell account passwords. We do not ask for your Wi-Fi password or router admin password; if you type credentials into your router’s own admin page inside RouterKit, they go directly to your router and are not sent to us. We do not sell your personal information.

3. How we use information

We use information to:

• Provide, maintain, and improve the website and apps;
• Return search and lookup results;
• Deliver push notifications you opted in to;
• Unlock, restore, and verify in-app purchases;
• Remember preferences (language, theme, consent choices);
• Measure usage and understand which content is useful (analytics);
• Detect, diagnose, and fix crashes and bugs;
• Show advertising that helps keep the Service free;
• Respond to support requests;
• Protect security, prevent fraud and abuse, and comply with legal obligations.

4. Legal bases (EEA/UK users)

Where applicable law requires a legal basis, we process personal data based on: (a) your consent (for example non-essential cookies, personalized ads, push notifications, and device permissions); (b) performance of a contract or steps you request (for example delivering an in-app purchase); (c) our legitimate interests in running a secure, working free Service (for example crash reporting and security logs); and/or (d) legal obligations.

5. Third-party services

We use trusted third parties that may process data on our behalf or under their own policies. Important providers include:

• Google Analytics (GA4) — website usage analytics. Google Privacy Policy
• Google Analytics for Firebase — app usage analytics in some apps. Firebase Privacy
• Firebase Crashlytics — crash reporting and diagnostics in our apps. Firebase Privacy
• Firebase Cloud Messaging — push notification delivery. Firebase Privacy
• Google AdSense / Google advertising services — ads on the website. How Google uses data for ads
• Google AdMob (with Google User Messaging Platform for consent) — ads in mobile apps. AdMob may collect advertising ID / IDFA, IP address (used to estimate approximate location), app interactions, and diagnostics. AdMob & privacy
• Google Play Billing and Apple In-App Purchase — processing of in-app purchases and subscriptions. Google Privacy Policy · Apple Privacy Policy
• Google Play / Apple App Store — app distribution and related services.

These providers may collect identifiers such as advertising IDs, IP address, and device/app information according to their policies and your device settings. We do not control their independent processing.

6. Cookies, consent, and ads

On the website we use a cookie consent banner (Google Consent Mode v2). You can accept all cookies, reject non-essential cookies, or manage categories (necessary, analytics, marketing).

• Strictly necessary cookies/storage are always active (login/session, language, theme, security, consent record).
• Analytics and marketing/ads run only when allowed by your choices (and applicable law).

You can reopen preferences anytime via Cookie settings in the site footer, or clear cookies in your browser.

In our apps, users in the EEA, UK, and Switzerland are shown a consent form (Google UMP) before personalized ads are served. On iOS, personalized ads that use the IDFA are shown only if you allow tracking in the App Tracking Transparency prompt. If you decline, you may still see non-personalized ads. You can reset your advertising ID, opt out of ads personalization (Android), or turn off “Allow Apps to Request to Track” (iOS) in system settings. Where an app offers a “remove ads” purchase, buying it stops ads in that app.

7. Sharing of information

We share information only as needed to operate the Service:

• With service providers listed above (analytics, crash reporting, push, ads, payments, hosting, app stores);
• If required by law, legal process, or to protect rights, safety, and security;
• In connection with a business transfer (for example merger or asset sale), where permitted by law.

We do not sell personal information for money. We do not share Wi-Fi details, local network scan results, or on-device history with anyone.

8. Data retention

We keep information only as long as needed for the purposes above, including legal, accounting, or reporting requirements:

• On-device data stays on your device until you clear it or uninstall the app.
• Push tokens and notification preferences are kept while they are valid and removed when the token expires, is invalidated, or you ask us to delete it.
• Crash reports are retained by Firebase Crashlytics for up to 90 days.
• Server logs are kept for a limited period for security and troubleshooting.
• Support emails are retained as long as needed to resolve your request.
• Purchase records are kept by Google Play or Apple under their own policies.

Analytics and ad partners retain data under their own retention rules. You may ask us to delete information we control by contacting [email protected].

9. Security

Data sent between our apps and our servers is encrypted in transit (HTTPS/TLS). We use commercially reasonable safeguards to protect information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Children’s privacy

The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

11. Your rights and choices

Depending on where you live (including under the GDPR, UK GDPR, and California CCPA/CPRA), you may have rights to access, correct, delete, or restrict certain personal data, to object to processing, or to withdraw consent. To exercise these rights for data we control, email [email protected]. We will not discriminate against you for exercising your rights. You can also:

• Manage cookie preferences on the website;
• Deny or revoke app permissions (location, local network, notifications, tracking, photos) in device settings;
• Reset your advertising ID or limit ad tracking in system settings;
• Clear in-app history and saved data, or uninstall an app to remove its on-device data.

Account deletion (website): If you have a cocmap.com / clasher.us account and want it deleted, email us from the address associated with the account and request deletion. We will delete or anonymize account data we control within a reasonable time, except where we must retain information for legal reasons.

Mobile app data deletion: Our mobile apps do not require an account. To delete data linked to your app installation on our servers (such as the app instance identifier and push token), email us with the app name; you can find the identifier in the app’s settings or about screen where available, or we will help you locate it. Uninstalling an app removes its on-device data.

12. International transfers

We and our providers may process information on servers in different countries. By using the Service, you understand that your information may be transferred to jurisdictions that may have different data-protection rules than your own.

13. Links to other sites

The Service may link to third-party websites or apps (including Supercell products and our other fan sites). RouterKit may open your router’s own admin web page, which is operated by your router, not by us. We are not responsible for third-party privacy practices. Review their policies before providing personal information.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated “Last updated” date. Continued use of the Service after changes means you accept the updated policy.

15. Contact us

Questions about this Privacy Policy or our data practices:

Developer (Google Play): phuocly
Developer (Apple App Store): Lam Nguyen
Email: [email protected]
Website: https://cocmap.com