Global Conflict is run by a small independent team. We collect the minimum we need to run an online game with accounts, and we do not sell your data to anyone. This policy explains the detail.
1. What We Collect
Information you give us
- Account details: username, email address, and a password. Passwords are stored only as a salted hash, never as text we can read.
- Profile details: first and last name if you provide them, your birth year, and optionally your country.
- Google Sign-In: if you sign in with Google we receive your Google account identifier and email address. We never receive your Google password.
- Content you post: global chat messages, profile wall comments, and anything else you type into the Game.
- Support and reports: anything you send us in Discord, which is our support hub, or through the in-game report tool, including a snapshot of the content you reported.
- Discord link: your Discord user ID, but only if you are a staff member and you choose to link it.
Information collected automatically
- Game state: your level, resources, buildings, gear, battle history and every other value that makes up your account. This is the game.
- Technical data: your IP address and request details in our server logs, plus the client version you are running.
- Push token: if you enable notifications, a Firebase Cloud Messaging token identifying your device, and which platform it is.
- Timestamps: when your account was created and when you were last seen.
We do not use advertising networks, we do not run third-party analytics or tracking pixels, and we do not build advertising profiles.
2. Why We Use It
- To run the Game: authenticate you, save your progress, resolve battles, and show leaderboards. This is necessary to provide the service you asked for.
- To keep it fair and safe: detect cheating and exploits, act on player reports, and enforce the Code of Conduct. We keep a staff audit log of every moderation action for accountability.
- To contact you: password resets, and push notifications you opted into.
- To meet legal obligations where they apply to us.
We do not send marketing email, and we do not sell, rent or trade personal information.
3. What Other Players Can See
Some information is public inside the Game by design. Other players can see your username, profile ID, level, country if you set one, your public profile stats, your equipped gear, your position on leaderboards, and anything you post in chat or on a profile wall.
Your email address, real name and birth year are never shown to other players. Choose a username you are comfortable being public.
4. Who We Share With
We share data only with the service providers that make the Game work:
- Hosting: our server provider, which hosts the game servers and database.
- Google Firebase Cloud Messaging: to deliver push notifications.
- Google Sign-In: only if you use it to sign in.
- Microsoft (Outlook and Microsoft Graph): to send transactional email such as password resets.
- Discord: our community server and support hub. Joining is voluntary, and anything you tell us there is handled under Discord's own privacy policy as well as this one.
We may also disclose information where we are legally required to, or where it is necessary to investigate a serious breach of our Terms.
5. How Long We Keep It
- Account data: for as long as your account exists.
- Combat log entries: pruned automatically on a rolling retention window.
- Staff audit records: 90 days.
- Password reset tokens: 30 minutes, and only as a hash. The token itself is never stored.
- Server logs: a short rolling window for diagnostics and abuse investigation.
6. Security
Passwords are hashed. Sessions use signed tokens that we can revoke, and a password reset revokes every existing session on the account. Our database user has restricted permissions to limit the damage of any single compromise.
No system is perfectly secure. If we ever discover a breach affecting your personal information, we will tell affected players and the relevant regulator as the law requires.
7. Children
The Game is not for anyone under 13, and we do not knowingly collect information from children under 13. If you believe a child under 13 has an account, tell us in our Discord server and we will delete it. Parents and guardians may raise a minor's account with us the same way, and do not need a Discord account of the child's to do so.
8. Your Rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal information, and to object to it or withdraw consent. To exercise any of these, open a ticket or message the staff in our Discord server, which is where we handle all support. Tell us the username and the profile ID on the account so we can confirm it is yours.
Account deletion: we will delete your account and its personal data. We may retain a minimal record where we must, for example to enforce a ban or to meet a legal obligation, and moderation records already written to the audit log run out their retention period. Deletion is permanent and your progress cannot be restored afterwards.
If you are in South Africa you may complain to the Information Regulator. If you are in the EEA or the UK you may complain to your local data protection authority.
9. International Transfers
Our servers and service providers may be located outside your country, so your data may be transferred and stored elsewhere. We only use providers that offer appropriate safeguards for that transfer.
10. Cookies and Local Storage
The browser version of the Game stores your login session and settings on your own device. See the Cookie Policy for the detail.
11. Changes
We may update this policy. Material changes will be announced on this site and in our Discord, and the date below will change.
12. Contact
Our Discord server is where we handle privacy questions and requests, and every other kind of support. It is the fastest way to reach a human.
Last updated: 14 August 2026.