Privacy notice
Updated 12 August 2026 · in effect from 12 August 2026
This notice explains what personal information ClanAudit handles when you read the site or join the alert list, why it is held and who else sees it. It is written to sit with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
1. Who is responsible
ClanAudit is an independent editorial desk publishing reviews of mobile games from Google Play. The desk operates from Australia and is responsible for the personal information described here. Questions about this notice, and requests about your own information, reach us at studio@clanaudit.com.
2. What is collected
- Server and log information. Our hosting provider records the IP address of the device, the user-agent string of the browser, the page requested, the referring page and the date and time. These records are produced automatically for every visit.
- Cookies and similar browser storage. A small entry stores your answer to the cookie banner so it is not shown again. Other categories are described in the cookie notice.
- Alert-list details. If you use the form on the main page, we receive the e-mail address you type and, if you choose to give it, a name. The form has no telephone field and we do not ask for one.
- Push notification identifiers. If you allow notifications, OneSignal issues a subscription identifier tied to that browser or device, along with basic technical data such as browser type, language and time zone.
- Advertising information. Advertising placements shown on the pages may rely on cookies or identifiers set by the advertising provider. Those are described in the cookie notice and are only set where the relevant consent has been given.
3. Why the information is held, and on what basis
- To publish and serve the site, keep it available and defend it against abuse — a function reasonably necessary for the activity of the desk.
- To send the alert about a new audit sheet by e-mail or browser notification — on the basis of the consent you give when ticking the box or accepting the browser prompt.
- To understand which entries are read, in aggregate, so the catalogue can be planned — where analytics has been accepted.
- To display the advertising placements shown on the pages — where advertising storage has been accepted.
- To answer correspondence sent to the desk, including corrections from readers and studios.
4. How long it is kept
- Server and log records: up to 12 months, then deleted or aggregated.
- Alert-list details: until you leave the list, and up to 12 months after that so a repeat request can be matched.
- Push identifiers: until the notification permission is revoked in the browser or the subscription lapses.
- Consent records for cookies: in your own browser storage until you clear it.
- Correspondence: up to 24 months, unless a correction thread needs to be kept with an entry.
5. Who else sees it
Personal information is never passed on for anyone else’s marketing. It is disclosed only to the providers needed to run the site, and only for that purpose:
- Hosting and content delivery provider — serves the pages and keeps the technical logs described above.
- OneSignal — acts as our processor for browser notifications and for the alert e-mail list, holding the address, any name given and the subscription identifier.
- Advertising providers — deliver and measure the placements shown on these pages, where advertising consent has been given.
- Authorities — only where disclosure is required by Australian law.
6. Handling outside Australia
Some of those providers, including OneSignal, operate infrastructure outside Australia, typically in the United States and the European Union. Where information is handled overseas we take reasonable steps to require that it is protected on terms consistent with the Australian Privacy Principles.
7. Cookies
The categories of cookies and browser storage used here, their purpose and their lifetimes are listed separately in the cookie notice. The banner at the bottom of the page records your choice, and you can change it at any time by clearing site data in your browser and answering the banner again.
8. Your rights
- Access. You may ask what personal information about you the desk holds, and receive a copy.
- Correction. You may ask for information that is inaccurate, out of date or incomplete to be corrected.
- Cancelling consent. You may leave the alert list at any time using the link in the e-mail or by writing to the desk, and you may turn off notifications in your browser settings. Cancelling consent does not affect handling that already took place.
- Complaint. If you believe your information has been mishandled, write to the desk first; we will respond within 30 days. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
9. Security
The site is served over HTTPS. Access to the alert list is limited to the people who run the desk and is protected by individual accounts on the provider side. No online service can promise perfect security, but records are kept only as long as they are needed and are deleted on schedule.
10. Children
The site is written for adults, including parents choosing titles for children. We do not knowingly collect information from children, and the alert form is not directed at them. If you believe a child has submitted details, write to the desk and the entry will be removed.
11. Changes to this notice
If the notice changes, the date at the top of this page changes with it, and a note appears on the following audit sheet. The version in effect is always the one published here.