Global Conflict is run by a small independent team. We collect the minimum we need to run an online game with accounts, and we do not sell your data to anyone. This policy explains the detail.
1. What We Collect
Information you give us
- Account details: username, email address, and a password. Passwords are stored only as a salted hash, never as text we can read.
- Profile details: first and last name if you provide them, your birth year, and optionally your country.
- Google Sign-In: if you sign in with Google we receive your Google account identifier and email address. We never receive your Google password.
- Content you post: global chat messages, profile wall comments, and anything else you type into the Game.
- Support and reports: anything you send us in Discord, which is our support hub, or through the in-game report tool, including a snapshot of the content you reported.
- Playing inside Discord: if you open the Game inside a Discord call, Discord sends us your Discord user ID, username, display name and email address, and whether Discord has verified that email. We use them to sign you in: a verified email that matches an account signs you into it, and a new player can create an account with it, with the display name offered as a username suggestion. We use your Discord email only for account and security mail, such as sign-in codes and password resets, never to contact you about anything else. We never receive your Discord password.
- Discord link: your Discord user ID, linked to your game account, so the Game can sign you in automatically next time you play inside Discord and our Discord bot can recognise you. It is set when you play inside Discord, or when a staff member chooses to link their own account. See section 8 for how to remove it.
Information collected automatically
- Game state: your level, resources, buildings, gear, battle history and every other value that makes up your account. This is the game.
- Technical data: your IP address and request details in our server logs, plus the client version you are running. When you play inside Discord, your requests reach us through Discord, so we see Discord's network address instead of yours.
- Crash and error reports (Sentry): when the app, the browser version or our server runs into an error, a report is sent automatically to Sentry, our error monitoring service, so we can find and fix the fault. A report holds the error and where in the code it happened, the steps the Game took just before it (for example which screen opened, with sign-in tokens removed), the page or screen, the app version, and your device, operating system and browser. Sentry also records the IP address the report came from and the approximate location (city and country) it works out from that address. A report holds no name, email address, password or player ID and no screenshot, and a report from our server names the request that failed but never includes its contents (so never a password or anything else you entered). If the browser version blocks something unexpected from loading on its page, your browser sends Sentry a short security report naming what was blocked. The browser version also loads Sentry's reporting code from Sentry's own servers. When you play inside Discord, reports reach Sentry through Discord, so Sentry sees Discord's network address instead of yours.
- Push token: if you enable notifications, a Firebase Cloud Messaging token identifying your device, and which platform it is.
- Timestamps: when your account was created and when you were last seen.
- Your privacy choices: each choice you make about ad measurement, with the date you made it and the version of the policy it was made under, so we can show what you agreed to and when. Also whether you have verified your email address.
- Where you arrived from: if you reach us through an ad, a link or a search, we record the source (for example "facebook" and the ad, or "google") with your account when you create it, so we can tell which channels bring players who go on to enjoy the Game. It is recorded once and never updated, it holds nothing that identifies you personally, and it is not shared with anyone. It applies to the browser version only. Your browser keeps it between visits only if you accept the cookie banner; otherwise it is read from the link you arrived through and sent only if you create your account during that visit. See the Cookie Policy.
- Sign-up steps (an anonymous count): to see where new visitors give up before they create an account, we keep a daily tally of how many times each step is reached, for example the Game appearing on screen, the sign-up screen opening, or a sign-up being sent. Each entry in the tally holds only the day, the step, which form check stopped a sign-up (if one did), the source of the link the visit started from (for example "tiktok") and whether it was the browser version or the Android app. It holds no account, name, IP address, cookie or device identifier, so no count can be traced back to you, and nothing is saved on your device or read from its storage to make it. It runs for every visitor, without the cookie banner, because it records nothing about you as a person.
- Ad performance (Meta Pixel): if you accept it in the cookie banner shown on the browser version of the Game, which ad you arrived from and whether you went on to create an account. Only in the browser version, and only after you accept it. See the Cookie Policy for the detail.
- Rewarded ads (Google): the Game shows no ads unless you choose to watch one, for example to swap a Daily or Weekly task. Only then, Google (AdMob in the Android app, AdSense in the browser version) loads an ad and may use your device's advertising ID or a cookie, your IP address and basic device information to serve it, measure it and prevent fraud. The first time you choose to watch an ad, Google's own consent message asks whether ads may be personalised, where the law requires it. We send Google your player ID and a one-time code so it can confirm to us that the ad was watched; we do not send your email, real name or birth year.
Apart from these, we do not run any third-party analytics or tracking: Sentry's reports are used only to fix faults, never to measure how you play or to follow you across sites. We do not build advertising profiles ourselves. How Google uses data from the sites and apps that show its ads is set out at policies.google.com/technologies/partner-sites, and you can turn off personalised ads at any time in Google's Ad Settings.
2. Why We Use It
- To run the Game: authenticate you, save your progress, resolve battles, and show leaderboards. This is necessary to provide the service you asked for.
- To keep it fair and safe: detect cheating and exploits, act on player reports, and enforce the Code of Conduct. We keep a staff audit log of every moderation action for accountability.
- To contact you: password resets, email verification codes, and push notifications you opted into.
- To meet legal obligations where they apply to us.
We do not send marketing email, and we do not sell, rent or trade personal information.
3. What Other Players Can See
Some information is public inside the Game by design. Other players can see your username, profile ID, level, country if you set one, your public profile stats, your equipped gear, your position on leaderboards, and anything you post in chat or on a profile wall.
Your email address, real name and birth year are never shown to other players. Choose a username you are comfortable being public.
4. Who We Share With
We share data only with the service providers that make the Game work:
- Hosting: our server provider, which hosts the game servers and database.
- Google Firebase Cloud Messaging: to deliver push notifications.
- Google Sign-In: only if you use it to sign in.
- Meta (Facebook/Instagram) Pixel: only in the browser version of the Game, and only if you accept it in the cookie banner, to measure how our ads on those platforms perform.
- Google AdMob and Google AdSense: only when you choose to watch a rewarded ad, to serve that ad and confirm it was watched, as described in section 1. Google acts as a third-party ad vendor and uses cookies or your advertising ID to serve ads; personalised ads are shown only where you allow them.
- Sentry (Functional Software, Inc.): error monitoring. It receives the crash and error reports described in section 1 and stores them in its European Union data region (Germany).
- Microsoft (Outlook and Microsoft Graph): to send transactional email such as password resets.
- Discord: our community server and support hub, and, if you play inside Discord, the service the Game runs in. Joining or playing there is voluntary, and anything you tell us or do there is handled under Discord's own privacy policy as well as this one. We do not send Discord your game data.
We may also disclose information where we are legally required to, or where it is necessary to investigate a serious breach of our Terms.
5. How Long We Keep It
- Account data: for as long as your account exists.
- Discord link: until you remove it, or your account is deleted.
- Combat log entries: pruned automatically on a rolling retention window.
- Staff audit records: 90 days.
- Crash and error reports: 30 days, after which Sentry deletes them automatically.
- Password reset tokens: 30 minutes, and only as a hash. The token itself is never stored.
- Server logs: a short rolling window for diagnostics and abuse investigation.
6. Security
Passwords are hashed. Sessions use signed tokens that we can revoke, and a password reset revokes every existing session on the account. Our database user has restricted permissions to limit the damage of any single compromise.
No system is perfectly secure. If we ever discover a breach affecting your personal information, we will tell affected players and the relevant regulator as the law requires.
7. Children
The Game is not for anyone under 13, and we do not knowingly collect information from children under 13. If you believe a child under 13 has an account, tell us in our Discord server and we will delete it. Parents and guardians may raise a minor's account with us the same way, and do not need a Discord account of the child's to do so.
Players aged 18 or under, and accounts with no birth year, are marked as under age when they choose to watch an ad, so Google treats the request as coming from a minor: no personalised ads, and only ads suited to a teen audience.
8. Your Rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal information, and to object to it or withdraw consent. To exercise any of these, open a ticket or message the staff in our Discord server, which is where we handle all support. Tell us the username and the profile ID on the account so we can confirm it is yours.
Account deletion: we will delete your account and its personal data. We may retain a minimal record where we must, for example to enforce a ban or to meet a legal obligation, and moderation records already written to the audit log run out their retention period. Deletion is permanent and your progress cannot be restored afterwards.
Removing the Discord link: type /unlink in our Discord server, or ask a staff member there. The next time you open the Game inside Discord it links again, so stop playing there if you want it to stay off. You can also remove Global Conflict from Authorized Apps in your Discord settings, which stops Discord sharing your details with us; that does not remove the link we hold, so use /unlink as well.
If you are in South Africa you may complain to the Information Regulator. If you are in the EEA or the UK you may complain to your local data protection authority.
9. International Transfers
Our servers and service providers may be located outside your country, so your data may be transferred and stored elsewhere. We only use providers that offer appropriate safeguards for that transfer.
10. Cookies and Local Storage
The browser version of the Game stores your login session and settings on your own device. See the Cookie Policy for the detail.
11. Changes
We may update this policy. Material changes will be announced on this site and in our Discord, and the date below will change.
12. Contact
Our Discord server is where we handle privacy questions and requests, and every other kind of support. It is the fastest way to reach a human.
Last updated: 23 October 2026.