Colony Conquest

Privacy Policy

Version: 1.4 · Effective: 25 October 2026 · Controller: the Colony Conquest developer

This policy explains which personal data the Colony Conquest mobile game ("the Game") processes and why, how long it is kept and how you can exercise your rights. Players in Turkey should also read the KVKK Privacy Notice. The Turkish version of this policy prevails in case of conflict.

1. In short

2. Data we process

Data When Purpose
Email address and password If you create an email account Sign-in. The password is stored on our identity server only as an irreversible hash
Guest identity If you play as a guest Sign-in. A random identifier and secret generated on your device, not linked to you
Player ID, nickname, chosen army, language In online mode Showing you in the world, leaderboards
Game records In online mode World events (conquests, battles), puzzle moves and results, your online ultis and chest. Running the Game, enforcing the rules, preventing cheating
Game Center / Google Play Games player ID and display name If you sign in with your platform account or link your account to it Automatic sign-in; finding your account when you sign in with the same platform account on another device
Single-player progress (cloud save) If you have an account Cities you conquered, stars, points, gold, ultis, atlas times and the lives timer. Letting you continue on another device. If two devices have different progress, we read its summary (conquests, stars, points, date) to ask which one to keep
Last session time and app version In online mode Helping with support, prompting outdated versions to update, preventing abuse
Reports, blocks and support requests If you use these features Reviewing reports, hiding blocked players' names from you, answering your request
Account suspension records If you break the community rules Reason, duration and the administrator who acted: enforcing the suspension and reviewing your appeal
Acceptance of the Terms When you create an online account Recording the version you accepted and when
Notification token, platform and notification preferences (quiet hours, groups you turned off) Only if you allow notifications Sending attack, capital and territory alerts and announcements to your device. The notification text contains the city name and the attacker's nickname
IP address and request logs Each time you connect to the server Security, abuse prevention, debugging. Not used to infer your location

Your settings on the device (sound, haptics, language) stay only on your device. Without an account, single-player progress stays only on your device too.

3. Legal basis

Account, profile and game records are processed to perform our contract with you (the Terms of Use). Security logs and cheat prevention rely on our legitimate interests. Reports and support requests are processed to handle your request. Notifications depend on your device's notification permission: without it no token is collected, and if you withdraw it no notification is sent. We do not rely on consent for any other processing.

4. Who we share data with

We do not share data with any other third party.

5. Security

All traffic between the app and the server is encrypted (HTTPS/TLS). Server access is limited to authorised people. Passwords are stored only as hashes. Your sign-in details are kept in your device's secure storage (Keychain on iPhone, encrypted with the Keystore on Android). So that your account is not lost when you change devices or reinstall the Game, the guest identity is backed up encrypted in your own Apple or Google account by iCloud Keychain (if it is on) or Google Block Store; we have no access to that backup. Your password is not stored anywhere.

6. Retention

Data Period
Account, profile, acceptance of the Terms, last session, suspension records Until you delete your account (a suspension record then stays unlinked from you)
Game records While the world runs and in its archive. Unlinked from you (anonymous) when you delete your account
Reports and support requests 12 months after they are closed
Notification token Until you sign out, delete your account or the service reports the token as invalid
Cloud save (single-player progress) Until you delete your account
Server and request logs (including IP) 7 days
Daily database backups 30 days

7. Deleting your account and data

Deletion immediately removes your sign-in identity, nickname, army, world memberships, online ultis, cloud save, block list and support requests. Single-player progress on your device is not deleted. Your moves in world history remain only in anonymous form. Logs are deleted automatically within 7 days and backups within 30 days.

8. Your rights

You have the right to access, correct and delete your data, to object to processing and to receive a copy of your data. You can change your nickname in the Game. For other requests use the support form. We answer within 30 days. If you are in the European Union you may complain to your local data protection authority; in Turkey, to the Personal Data Protection Board.

9. Children

Single-player mode is suitable for everyone. Online mode is for ages 13 and over. If the age of digital consent in your country is higher (up to 16 in the European Union) and you are below it, you need a parent's permission for an online account. If we learn that an online account belongs to a child under 13, we delete it.

10. Changes

If we change this policy we will publish the new version on this page and announce important changes in the Game. The effective date is shown at the top.

11. Contact

the Colony Conquest developer · Support