Brawl Network
Privacy & Disclaimer
How Brawl Network handles data, cookies, advertising, reward alerts, and fan content.
Unofficial Fan Content

This material is unofficial and is not endorsed by Supercell. For more information see Supercell's Fan Content Policy: www.supercell.com/fan-content-policy. Rewards, games, names, logos, characters, QR codes, voucher links, and related assets belong to Supercell. Brawl Network is not affiliated with, sponsored by, approved by, or produced by Supercell.

Reward Links

Brawl Network collects and organizes publicly available reward links and official store destinations. Reward availability can change at any time. Brawl Network may also distribute creator-provided voucher links through clearly marked free giveaways. All redemptions happen through official Supercell, Brawl Stars, Clash Royale, or Clash of Clans destinations. Brawl Network does not create, sell, or guarantee rewards.

iPhone App

The iPhone app displays our live free-rewards pages. Its saved rewards, private notes and claimed checklist are stored locally in the app, not uploaded to Brawl Network. Device backups may include this local data. Remove entries or choose Delete saved library to delete the library and cancel its reminders. Optional reminders use local iOS notifications; they do not send a push subscription to our servers or monitor new rewards.

If you enable automatic reward notifications in the app, we store an Apple push token, a random installation identifier, your selected games, and a protected hash of a subscription management secret. We use these to send new-reward alerts through Apple Push Notification service. Delivery records are retained for up to 30 days. Turning reward alerts off in App controls removes your subscription and game preferences. No email address or Supercell login is required for app alerts.

Website requests and actions inside the app still reach our servers and service providers as described below. The app blocks known Google analytics and advertising hosts within embedded web pages. App controls → Privacy and website data lets you clear website cookies, cache and preferences separately from your saved library. This does not delete data already sent to a server; contact us for server-data requests. External reward destinations have their own policies.

Optional App Analytics

With your permission, the iPhone app uses Google Analytics for Firebase to measure screens, sessions, saves, claimed marks, completed scans and giveaway entries. Collection stays off until you choose Allow analytics. Firebase uses an app-instance identifier and processes technical information such as app version, device characteristics and approximate location derived from IP. Our custom events do not include names, emails, account IDs, scanned URLs or private notes. Advertising storage, advertising personalization and IDFV collection are disabled.

Declining does not restrict app features. Change your choice in Profile → App experience → Share usage analytics. Turning it off stops future collection and resets local analytics data; it does not automatically delete records already processed. Contact us for data requests. Google processes analytics data on our behalf; see Google’s information about partner data.

Our private administrator dashboard also summarizes account and giveaway records already needed to operate those features, such as profile counts, entry totals and prize status. It introduces no additional device tracking or visitor identifiers and does not join these records to Firebase analytics. Underlying records remain subject to the retention and deletion provisions below.

Data We May Collect

Optional app profiles store a display name, chosen profile icon, creation date, linked provider identifiers and hashed sign-in sessions. Apple, Discord and Google authenticate you; we do not receive your password. We do not merge accounts by email address. You can explicitly combine compatible profiles after authenticating both logins; other sessions are signed out and email preferences reset to off. We store a verified email supplied by your login provider for account and prize messages. Apple may supply a private relay address. Email never automatically merges accounts or subscribes you to marketing. Discord access identifies your account and, with your permission, supplies your verified email. We attempt to revoke it immediately, but Discord rate limits or outages may prevent revocation. We do not retain Discord access or refresh tokens; you can also remove the authorization in Discord settings. Google access used for app sign-in is revoked after identifying the account. Where Apple sign-in is enabled, encrypted revocation credentials let us disconnect it when you delete your account. App sessions expire after 30 days. Short-lived hashed network identifiers limit repeated sign-in attempts. In the app, Profile lets you edit your profile. Account settings contains linked logins, sign-out and account deletion after a recent sign-in. Deletion removes your profile, linked logins, sessions and associated giveaway records; saved rewards remain on your device. Cloudflare recovery backups may retain earlier database state for up to 30 days after deletion. We do not maintain a separate deleted-account archive. If provider revocation fails, we report the failure so you can retry rather than claiming deletion succeeded. Google sign-in requests your account identifier and verified email; it does not request access to Gmail, Drive, contacts or other Google content.

Optional account emails require a separate choice and inbox confirmation. We store your email address, selected categories, consent version and time, and confirmation status. Brevo processes confirmation email delivery. Pending requests are not subscribed. You can turn email updates off in Account settings or through the unsubscribe link, which removes that subscription from our active database. Account deletion also removes email preferences. Login email addresses are not automatically enrolled. Recovery backups may retain earlier data for up to 30 days.

When you agree to prize emails while entering, we use your saved account email. If you previously supplied a prize-delivery email, we store it with the giveaway, your account and the time and version of your permission. It is private to you and the organizer and used to contact you about that giveaway and deliver a prize, not to enroll you in marketing. You can change it before delivery, remove it by leaving an open giveaway, or request removal through support. Account deletion removes it.

For giveaway accounts, we store your Discord user ID, a generated public Brawler alias, hashed session tokens, dated entry receipts and prize delivery confirmations. Discord sign-in requests your identity only, not your email, messages or server membership. Session cookies expire after 30 days; signing out revokes the current session. Public winner records show the alias, winning ticket reference, redacted delivery evidence and confirmation status. Giveaway records are retained for prize auditing; contact us below for account and data-removal requests.

If you sign up for reward alerts, we store your email address. If you enable device notifications, we store a browser push subscription endpoint and notification keys so alerts can be delivered to your device. We may also use analytics to understand page views, claim button clicks, and site performance. Cloudflare and analytics providers may process technical information such as IP address, browser, device, and request logs. The prize wheel's approximate live-player count uses a small anonymous sample of random browser identifiers. Only a protected hash is stored, visitors stop counting as active after five minutes, and old presence records are periodically removed.

Advertising, Cookies & Consent

Brawl Network may display advertising. When advertising is active, third-party vendors, including Google, may use cookies or similar technologies to serve, measure, and limit ads. Google's advertising cookies can allow Google and its partners to show ads based on visits to Brawl Network and other sites. You can manage or opt out of personalized Google advertising in Google Ads Settings.

For visitors in the European Economic Area, the United Kingdom, Switzerland, and other regions where consent is required, Brawl Network will use a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework before enabling non-essential advertising storage or personalized advertising. Consent choices can be changed through the privacy controls shown on the site when advertising is enabled. Advertising is kept visually separate from Claim, Copy link, Claimed, Report, navigation, and other interactive controls.

Learn more about how Google uses information from sites that use its services at Google's Business Data Responsibility site.

Prize Wheel Protection

To keep creator giveaways fair, the prize wheel stores a random browser identifier in a secure cookie and stores protected hashes of that identifier and network address with the assigned reward. Raw network addresses are not stored in the wheel database. These records are used to enforce one successful claim per daily window and are removed after 30 days. Cloudflare Turnstile processes technical browser and network signals to distinguish people from automated abuse.

What We Do Not Ask For

Brawl Network does not ask for your Supercell ID password, game account login, payment details, or private account credentials. Do not enter those details on any fan site.

Contact

For privacy, correction, or removal requests, contact chosen@brawlnetwork.com.