Privacy Policy
- Your family's information is kept on your family's own devices.
- There's no ClanStation account. We never ask for your email.
- Your devices sync directly over your home Wi-Fi, and through our relay when they're apart. Everything they send is end-to-end encrypted, so we can't read it.
- No ads, no analytics, no tracking. We never sell or share your data.
- Google Calendar is optional, and you can disconnect it any time.
Who we are
ClanStation is a family organiser app made by Overclocked Otter LLC. In this policy, "we" and "us" mean Overclocked Otter LLC. "You" means the parent or family using ClanStation.
This policy covers the ClanStation app on every platform, the ClanStation relay, and this website.
What ClanStation stores, and where
ClanStation is "local-first". Everything you put in it is stored on your family's own devices: the wall screen, phones, tablets and computers you add. That includes:
- Calendar events
- Quests (chores), XP, coins, levels and rewards
- Lists, meal plans and recipes
- Household projects and upkeep reminders
- Family member profiles and settings
- Which photo folder the wall slideshow uses (the photos stay where they are: ClanStation shows them from that folder and never copies or sends them)
There is no ClanStation account and no sign-up. We don't collect your name, email address or phone number.
How your devices sync
The first device you set up makes a secret family key. When you add a device, the key is passed to it by QR code or invite code. Only your family's devices have the key. Everything your devices send each other is encrypted with it, end to end.
At home
On the same Wi-Fi network, your devices talk to each other directly. Nothing passes through us.
Away from home: the ClanStation relay
When your devices aren't on the same network, they pass changes through the ClanStation relay, which runs on Cloudflare's network at relay.clanstation.com. The relay keeps the latest version of your family's information so a device that's been off can catch up, but only in encrypted form:
- Every value is encrypted with your family key before it leaves your device, and even the names of the things you change are scrambled. We can't read any of it.
- Your family's mailbox on the relay is named by a code made from your family key. There's no name, email or account attached to it, so we can't tell whose it is.
- Like any web service, the relay and Cloudflare see the internet (IP) address a device connects from, and when. We don't use this for anything other than running the relay, and we don't combine it with anything else.
We may delete relay mailboxes that haven't been used for a long time. Your own devices keep their full copy either way.
No ads, no tracking
ClanStation has no ads, no analytics and no tracking tools. We don't build profiles about you. We never sell, rent or share your family's information with anyone.
This website doesn't use cookies, trackers or analytics, and it loads nothing from other websites. Its fonts and pictures are served from clanstation.com itself.
Services ClanStation talks to
To do a few useful things, the app contacts these outside services. Here's exactly what each one gets. Each has its own privacy policy.
Weather: MET Norway
To show the forecast, ClanStation asks MET Norway's weather service (api.met.no) for the weather at the town you chose. It sends the approximate coordinates of that town and nothing about your family.
Town search: OpenStreetMap Nominatim
When you search for your town in the weather settings, the name you type is sent to OpenStreetMap's Nominatim service to find it on the map.
Recipe websites you choose
When you add a recipe from a link, ClanStation opens that web page from your device to read the recipe, just as your browser would. On phones and Windows it may open the page in a hidden built-in browser if the site needs one. The website sees an ordinary visit from your internet address. Nothing about your family is sent.
App updates: GitHub
About once a day, ClanStation checks GitHub (github.com) for a new version, and downloads it from there. No personal data is sent.
Google Calendar (only if you connect it)
ClanStation only talks to Google if a parent chooses to connect a Google account. The next section explains this in full.
Like any website, each of these services can see your internet (IP) address when the app connects.
Google Calendar
Connecting Google Calendar is optional. A parent links Google calendars once, and events then sync both ways. A calendar can be given to a family member, such as a kid, so their events go there, and ClanStation can make a new calendar for someone who doesn't have one.
What we ask Google for, and why
https://www.googleapis.com/auth/calendar.events: to see, create, change and delete events in the connected account's calendars. This lets your Google events show in ClanStation, and lets events you make in ClanStation for a linked calendar be saved to Google.https://www.googleapis.com/auth/calendar.calendarlist.readonly: to list the account's calendars, so you can pick which ones to show.https://www.googleapis.com/auth/calendar.app.created: to make a new calendar when you ask ClanStation to make one for a family member. It only lets ClanStation change calendars it made.openidandemail: to show which Google account is connected.
How it's handled
- You sign in on Google's own page. ClanStation never sees your Google password.
- The access token Google gives back is stored only on the device where the parent connected. It is never sent to other family devices, to us, or anywhere else.
- Event details from the calendars you choose are copied to your family's devices so everyone can see them. Whenever they travel between your devices, directly or through the relay, they're encrypted end to end.
- Events made in ClanStation for a linked calendar are sent to Google.
- Nothing from Google is used for ads, sold, given to anyone else, or used to train AI.
ClanStation's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting
Go to Settings → Google Calendar → Disconnect. This removes the Google account and its events from ClanStation. Nothing is deleted in your Google account. You can also remove ClanStation's access at any time at https://myaccount.google.com/permissions.
Fingerprint and face unlock
On a parent's phone, ClanStation can use the phone's fingerprint or face unlock instead of the parent PIN. The phone checks it; ClanStation only hears "yes" or "no". Your fingerprint and face are never seen by ClanStation, stored by it, or sent anywhere.
Children's privacy
ClanStation is built for families with kids, and we take that seriously.
- A parent sets up the family and controls everything with a parent PIN, including settings and approvals.
- Kids don't enter an email address or contact details, and never create an account.
- Children's information (like their name, quests and events) stays on your family's devices, and is encrypted whenever it travels between them. We don't collect it and can't read it.
- There are no ads, no tracking and no chat with strangers.
Because we don't collect children's personal information, there's nothing on our side for us to hand back. A parent can review, change or delete a child's information at any time in the app.
Keeping it safe
Data sent between your devices is encrypted end to end with your family key. Settings and approvals are protected by a parent PIN.
Data stored on each device is protected by that device's own security. Each device keeps a full copy of the family's information and the family key, so please use a screen lock on your phones and computers, keep them updated, and only add devices you trust to your family.
How long data is kept
Your data stays on your devices until you delete it, remove the device from the family, or uninstall the app. The encrypted copy on the relay is replaced as things change, and old, unused mailboxes may be deleted.
Deleting your data
- An item or a person: delete it in the app. It's removed on all your family's devices, and the relay's copy is replaced with the deletion.
- One device: go to Settings → Remove this device from the family. This wipes the family's data from that device.
- Uninstall: uninstalling removes the app from that device.
- Google Calendar: disconnect as described above.
Changes to this policy
If we change this policy, we'll post the new version here and update the effective date at the top. If a change matters for how your data is handled, we'll say so on the home page too.
Contact us
Questions about privacy? We're happy to help.
Overclocked Otter LLC
Contact us through overclockedotter.com.