Privacy
Last updated 16 August 2026
The short version
You can use this whole site without an account. Signing in is only needed to save clubs, claim your pro, or post a recruitment listing. We do not run first-party analytics scripts or tracking pixels. Google AdSense may use cookies or similar technologies to serve and measure ads; you can inspect the publisher script in the page source.
Public EA data
Clublytics reads EA’s public Pro Clubs endpoints and stores the matches it finds: clubs, scorelines, and the per-player rows EA publishes for each match, including gamertags. This is the archive, and it is what the site is for — EA serves only your last ten matches, and everything older exists here because it was written down while it was still available.
This data is already public through EA. We do not know who you are from it, and a gamertag appears here whether or not its owner has ever visited the site.
If you sign in with Discord
The sign-in requests the identify scope and nothing else. That means we receive, and store, your Discord user ID, your username and your avatar. We do not receive your email address, your servers, your friends or your messages, and we cannot read them.
Your session is a signed cookie. There is no session table, so signing in creates no record beyond the account row itself.
Once signed in, the site also stores what you deliberately create:
- clubs and players you save
- the pro you claim, and whether it has been verified
- recruitment listings you post, and applications you send or receive
What stays on your device
Recent searches, recently scouted clubs and your platform choice are kept in your browser’s local storage, not on our servers. Clearing your browser data removes them, and they are never sent anywhere.
Where it is kept, and who else sees it
The site runs on a server rented from Hetzner in Falkenstein, Germany, and the database is a file on that machine rather than a managed service somebody else operates. Backups are Hetzner’s own snapshots of that server, so the archive and every account row stay inside the EU.
Cloudflare sits in front of it as a proxy: it terminates the connection, passes the request through and serves the share images, so it sees requests in transit. It does not hold the database.
Payments are handled by Stripe. What comes back to us is a customer id, a subscription id and whether the subscription is active — we never receive or store card numbers. Sign-in is Discord, described above.
Google AdSense processes advertising requests and may use cookies or similar technologies to serve and measure ads. We do not use data brokers, and we do not sell your account data.
Deleting your account
Your profile has a delete control, and it deletes: the account row, your saved clubs and players, your pro claim, and your listings and applications. It is a real deletion rather than a flag, and it takes effect immediately.
Archived matches stay. They are EA’s public record of games that happened rather than anything about your account, and removing a player from a match would leave every other player in that match with a false scoreline.
Contact
Questions, corrections, or a deletion you cannot perform yourself: use the contact form. It writes to the database and is read by the person who runs the site.

