Base Atlas Privacy Policy

Effective date: October 22, 2026

Base Atlas ("Base Atlas", "we", or "the app") is a community layout-sharing app for Clash of Clans players. It is developed and operated by Gabe Wilhide, an independent developer based in Indiana, United States. Gabe Wilhide is the controller of the personal data described in this policy. You can contact us at support@bsamaps.com.

1. Information we process

Account and profile information

The app creates a Firebase Authentication user ID so that uploads and community actions can belong to an account. The account begins anonymously. If you optionally link it with Sign in with Apple, Firebase receives an Apple account identifier and may receive the name and relay or regular email address that you choose to share through Apple. We also store profile information you provide, such as a public display name, and relationships such as follows and followers.

Layouts and community activity

When you upload or update a layout, we process the selected image, Clash of Clans copy link, optional army link and title, Town Hall or Builder Hall level, category, description, tags, user ID, and timestamps. Likes, follows, reports, and moderation actions are stored with the relevant user or layout identifiers and timestamps. Reports include the selected reason and any information submitted with the report.

Founder status

If an upload qualifies for the Founder promotion, we store the user ID, rank, qualifying layout ID, grant status and time, and any revocation status, time, or reason. This is used to administer the promotion and the associated ad-free benefit.

Favorites and local preferences

Favorites are stored only on your device (using iOS UserDefaults or Android SharedPreferences) and are not sent to our servers. The app and its service providers may also use device storage for settings, authentication, fraud prevention, ad-consent choices, and advertising functions.

Analytics, diagnostics, and technical information

Firebase Analytics processes app-interaction events such as opening and completing an upload, feed availability, copying a layout, training an army, sharing, and rewarded-ad loading, impressions, clicks, completion, and revenue. Event parameters can include a layout ID, general layout attributes, action source, result, ad placement, or technical error code; we do not intentionally send layout descriptions, tags, copy links, image URLs, or public display names as analytics parameters.

Firebase Crashlytics may process crash logs, diagnostics, device model, operating-system and app versions, and the Firebase user ID. Because the Firebase user ID is attached to crash reports, diagnostic information may be linked to the app account even when the account is otherwise anonymous.

Advertising information and approximate location

Google AdMob and its disclosed advertising partners may process IP address, device and app information, ad interactions, consent signals, and an advertising identifier such as the iOS IDFA or Android Advertising ID where available and permitted. An IP address may be used to infer an approximate country or region for ad delivery, reporting, security, billing, and fraud prevention. Base Atlas does not request or store precise GPS location.

Rewarded ads may be offered when you choose to copy a base or train an army. Completing one rewarded ad may temporarily unlock both actions for that layout. If consent or platform permission for personalized advertising is not available, Google may serve non-personalized or limited ads instead.

Images, links, and clipboard access

The app receives only images you select through the system picker. It may use privacy-preserving system detection to determine whether the clipboard appears to contain a supported Clash of Clans link; the clipboard value is used only if you choose to paste it. Opening a Clash of Clans copy or army link sends that link to the Clash of Clans app or website under its own privacy practices.

2. Why we process information and our legal bases

• Provide the service: account creation, profiles, feeds, uploads, likes, follows, reports, sharing, and account or content deletion are processed to perform the service you request and take steps at your request.
• Safety and legitimate interests: moderation, security, diagnostics, service analytics, fraud prevention, enforcement, and protection of users and infrastructure support our legitimate interests in operating and improving a safe and reliable service. We balance these interests against user privacy rights.
• Consent: where required, we rely on consent for personalized advertising, advertising or analytics device storage, and associated data sharing. Consent can be refused or withdrawn without losing the app's core browsing and community features.
• Legal obligations: we may process information when necessary to comply with law, respond to lawful requests, or establish, exercise, or defend legal claims.

3. Advertising consent and choices

For users in the European Economic Area, United Kingdom, and Switzerland, Base Atlas uses Google's User Messaging Platform to request applicable advertising and device-storage consent before requesting ads. The message identifies the advertising partners configured in AdMob and provides more information about their purposes.

Where available, you can review or change this choice through Profile > Privacy & Data > Ad Privacy Choices. You can also change the Base Atlas personalized-ads preference in the app and control system tracking permission in iOS Settings > Privacy & Security > Tracking or the corresponding advertising settings on Android. Withdrawing consent does not affect processing that occurred lawfully before withdrawal.

4. Service providers and recipients

We use the following providers only for the functions described:

• Google Firebase: Authentication, Firestore, Cloud Storage, Cloud Functions, App Check, Analytics, and Crashlytics.
• Google Cloud: infrastructure and automated image-safety checks, including Vision SafeSearch.
• Google AdMob and disclosed ad partners: consent management, rewarded advertising, measurement, security, and fraud prevention. The current partner list and each partner's details are available through the European consent message.
• OpenAI: automated moderation and classification of submitted content.
• Apple: optional Sign in with Apple and platform services on Apple devices.

We do not sell or rent personal information. Advertising providers may process information for their own disclosed advertising purposes when you consent or when another lawful basis applies.

5. International transfers

We are based in the United States, and our providers may process information in the United States and other countries outside your home country. Where European data-protection law applies, transfers are handled using an applicable adequacy decision, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or other approved safeguards, as appropriate. Information about a provider's safeguards is available in that provider's privacy documentation or by contacting us.

6. Retention

• Account, profile, upload, like, follow, report, and Founder records are generally kept while the account or associated content remains active.
• Deleting an uploaded layout removes the hosted layout and image and triggers removal of associated likes and reports. Deleting the account from the app triggers deletion of uploads and associated account data; server cleanup may take several minutes.
• Moderation, security, and abuse-prevention records may be kept for as long as reasonably necessary to enforce rules, prevent repeated abuse, resolve disputes, or comply with law.
• Analytics, crash, advertising, and consent records are retained according to the applicable Google product settings and retention schedules, or until they are no longer needed for the stated purpose.
• Local favorites and preferences remain until you remove them, clear app data, or uninstall the app.

When an exact period cannot be stated in advance, we consider the service relationship, the sensitivity of the information, safety and fraud risks, provider controls, and legal requirements.

7. Your privacy rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, restriction of, or a portable copy of your personal data; to object to processing based on legitimate interests; and to withdraw consent. You may delete individual uploads or your account through Profile > Privacy & Data.

To exercise a right, email support@bsamaps.com and include the anonymous ID shown in the app when available. We may request reasonable information to verify the request. We will respond without undue delay and ordinarily within one month where GDPR or UK GDPR applies.

You also have the right to complain to the data-protection authority where you live or work, or where you believe an infringement occurred. UK users may contact the Information Commissioner's Office, and Swiss users may contact the Federal Data Protection and Information Commissioner.

8. Moderation and automated processing

Submitted images and text may be automatically evaluated for safety and relevance using Google Cloud and OpenAI services. Community-report thresholds may temporarily hide content pending review. Moderators may review reports and can hide, restore, or remove content, reset a display name, revoke a promotional benefit, or restrict abusive accounts. These processes are used to protect the community and do not make decisions that produce legal or similarly significant effects under data-protection law. Contact us if you believe a moderation action was incorrect.

9. Children

Base Atlas is not directed to children under 13, and children under 13 must not use the app or upload content. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information, contact us so we can investigate and remove it. Age and parental-consent requirements may be higher in some countries.

10. Security

We use measures including Firebase App Check, Firebase Security Rules, authentication, encrypted network connections, server-side moderation, and abuse controls. No internet service can guarantee complete security. We will provide notices to users or authorities when required by applicable law.

11. Changes to this policy

We may update this policy as the app, providers, or legal requirements change. The effective date above shows the latest revision. If a change materially affects how we use personal data, we will provide additional notice when appropriate.

12. Supercell disclaimer

This material is unofficial and is not endorsed by Supercell. For more information, see Supercell's Fan Content Policy.

13. Contact

Data controller: Gabe Wilhide, Indiana, United States.
Privacy and support email: support@bsamaps.com.