Privacy policy

Last updated 22 October 2026

1. Who is responsible

The controller of the personal data processed by WoT Clan Stats is SBJ Analytics, 47 rue Vivienne, 75002 Paris, France (RCS Paris 109 875 617). For anything about your data, write to support@wotclanstats.com.

The short version: no email address is needed to use the service, there are no advertisements, no analytics and no tracking, and the only cookie is the one that keeps you signed in.

2. What we hold, and why

• Your account — your in-game name, a hash of your password (never the password itself), your clan, your role and access level, and when the account was created, approved and last used. Where it can be matched, your Wargaming account id. Why: to let you sign in and give you access to your clan's record (performance of the contract).
• Your clan's record — what members import from their own replay files: the battles, the in-game names of the players in them, their tanks, scores and positions; plus the clan roster and any portraits admins add to it, scheduling entries and notes, and who imported each battle and when. Why: this is the service itself (performance of the contract). It is visible only to the members your clan's admins let in.
• Public clan data — for the free leaderboard and clan pages, we read Wargaming's public API every night: clan names, tags, emblems and ratings, and the in-game names, account ids and roles of clan members. This is information Wargaming publishes. Why: to run the public pages (our legitimate interest in providing them). When Wargaming tells us an account has been deleted, we delete what we hold about it.
• Messages you send us — through the contact form: your name, an email address if you give one, your message, and your IP address. Why: to answer you (legitimate interest), and the IP address to stop abuse.
• Security data — your IP address, for a limited number of sign-in and search attempts, and the web server's standard access logs (IP address, page requested, browser type, time). Why: to keep the service secure and working (legitimate interest).
• Payments — handled entirely by Paddle (see section 4). We receive only the subscription's id, status and dates, to know which clan has paid. We never see card or bank details.

Replay files themselves are never uploaded: they are read in your browser, and only the figures extracted from them are sent to the server.

3. Cookies and local storage

One cookie, skl_sess, keeps you signed in. It is strictly necessary and set only when you sign in, so no consent banner is needed. The app also remembers a few display choices in your browser's local storage (light or dark theme, whether the sidebar is folded, which player you are on the schedule, whether you have seen the introduction). These never leave your browser.

4. Who else processes data

• OVH (France) hosts the server and its databases, in the European Union.
• Paddle (Paddle.com Market Ltd) is our reseller and merchant of record. When you pay, Paddle collects your billing details and processes them as an independent controller under its own privacy policy.
• Wargaming — our server asks Wargaming's public API for clan and player data. We send it clan and account ids, never anything about you as a visitor.
• Google Fonts — the pages load their typefaces from Google's servers, which therefore see your IP address when a page loads.

We do not sell personal data and do not share it with anyone else.

5. How long we keep it

• Accounts and clan records: for as long as the clan uses the service. When a subscription ends the record is kept, read-only, so that nothing is lost; a clan's admins, or you for your own account, can ask us to delete it at any time.
• Public clan data: refreshed every night; a member who leaves a clan stays listed as a former member for a while, and is removed as soon as Wargaming tells us the account was deleted.
• Contact messages: up to 12 months.
• Web server logs: about two weeks.

6. Your rights

Under the GDPR you can ask to see the data we hold about you, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Write to support@wotclanstats.com; we answer within one month. If you are not satisfied, you can complain to the French data protection authority, the CNIL, or to the authority of the EU country where you live.

7. Security

Each clan's record is held in its own database, reachable only with a signed session from that clan. Passwords are stored hashed, the site is served only over HTTPS, and the server is kept up to date.

8. Children

The service is not meant for children under 16, and we do not knowingly hold data about them.

9. Changes

If this policy changes, the date at the top changes with it, and significant changes are announced in the app.

See also the terms of service and the legal notice.