Privacy Policy

1. Who is responsible

Hodzic FahoX Studio is a registered Swiss sole proprietorship owned by Faruk Hodzic. We are responsible for the studio’s handling of personal information. Our business correspondence address is Stegmattstrasse 9B, 6033 Buchrain, Switzerland.

For privacy, deletion and player-safety requests, email support@conquestunlimited.com. General enquiries: info@conquestunlimited.com. The mailbox is checked daily during testing; that is not 24-hour staffing or a guaranteed resolution time.

2. Information used by the game

Information comes from your entries and actions, your device’s connection, any sign-in provider you choose, and reports from other players. Online play requires account and gameplay information. Chat, support contact and an available optional sign-in method are choices.

• Accounts: player/account IDs, guest or device-linked credentials, session information, player names and optional email-linked login information. When you choose Google linking or sign-in, we verify its identity proof and associate the provider identifier with your game account. We do not ask for your Google password.
• Progress: cities, castles, troops, gold, equipment, inventory, battles, quests, clans, seasonal participation, rankings and rewards. Relevant players can see multiplayer information such as your name, clan and ranking.
• Age and choices: a private age group, eligibility status, policy versions and optional-service choices. The implemented age-entry system retains an age group rather than a full date of birth. Self-declaration is not independent age verification.
• Community and safety: world/clan messages, game/developer inbox records, names, clan descriptions, blocks, reports, appeals and moderation decisions. Moderation can retain original filtered text and limited case evidence. Messages are visible to their intended audience.
• Connection and security: network addresses, device/session identifiers, service errors and records needed to deliver the game, investigate abuse and protect account integrity. Routine web-server access logging is off in the recorded test setup, but infrastructure and system logging are not necessarily absent.
• Deletion and recovery: request/status records and minimal protected identity references to prevent old backups or delayed operations from recreating deleted accounts. Coded or hashed identifiers can still be personal information.

The game stores local session, preference and deletion-status information to reconnect, remember choices and follow up on requests. Uninstalling or clearing app data does not erase server records. Earlier development builds had Unity engine diagnostics enabled; it was subsequently disabled. Historical provider-held diagnostics and deletion follow-up remain separate from deleting a game account.

3. Website and support information

Hosting infrastructure receives connection information such as your IP address, browser information and requested page to deliver and protect the site. The website code does not contain advertising or an optional analytics tracker.

Support forms store your email, optional name, Player ID when provided, topic, message, ticket number, submission time and delivery status. A request identifier and fingerprint prevent duplicate tickets. The deletion form asks for a Player ID to locate your account; an ID is not proof of ownership. If you have lost it, contact support for recovery.

Abuse controls use hashed IP and email identifiers with hourly counters. Hashing does not make these anonymous. Expired counters are cleaned when new tickets are handled. A support request is not a marketing subscription.

Email correspondence includes your address, message and attachments. Never send passwords, login codes, full payment details or unnecessary sensitive information. Automatic support-email forwarding is not currently configured: after saving a website ticket, use “Email this ticket” to send it from your email app. Website records and mailbox copies are separate.

Hosting and external services may use storage needed to provide their services. Optional tracking would require separate disclosure and any required consent before activation.

4. Discord community and voting bot

Discord participation is optional. Discord handles its service under its Privacy Policy. Our staff can see information you make available in the server, including your Discord name, posts and reactions, and reports you send us.

Our voting helper checks #suggestions and adds the checkmark/X reactions. Discord’s API provides message information for this purpose. The helper does not save message text or a separate voter list; Cloudflare stores the last processed message ID, scheduling/retry information and status counters. Posts and reactions remain on Discord under its retention controls. Reports separately sent to support are support or moderation records.

5. Why we use information

We use information to provide accounts and online gameplay, save progress, operate seasons and community features, verify permitted access, provide support, investigate cheating or abuse, protect players and handle deletion and legal obligations.

Where the GDPR applies, the grounds depend on the activity: providing the requested service or steps before a contract; legitimate interests in secure operation, fair competition and handling reports or disputes; legal obligations; and consent where required for an optional feature. We consider players’ interests and rights, including those of teenagers. Accepting terms or sending a support request is not consent to optional advertising or tracking.

Protective checks can automatically restrict unavailable features or filter content. You may ask support to review an account or moderation decision. An automated restriction is not, by itself, a finding that you cheated.

6. Providers, recipients and locations

• Hetzner: the documented game server is hosted in Nuremberg, Germany. See Hetzner’s privacy information.
• Cloudflare: network/security services, website hosting and support storage, Discord voting, and independent game-deletion records. Deletion-history storage is configured for EU jurisdiction; this does not mean every request, log or support operation stays in the EU. See Cloudflare’s Privacy Policy.
• OpenAI Sites: website publishing and hosting. See OpenAI’s Privacy Policy.
• Google: identity verification when you choose an available Google login/linking option, and Google Cloud Translation for reader-requested chat translations when that feature is available. See the translation explanation below, Google Cloud Translation and Google’s Privacy Policy.
• Email services: delivery and storage of messages sent to our mailbox.
• Other recipients: the audience for content you share, staff handling support and safety, and authorities or professional advisers where necessary for legal obligations, safety or disputes.

The studio operates from Switzerland. Providers may process information in the EU, the United States and other infrastructure locations. Provider-specific countries and contractual transfer arrangements still need to be reconciled for wider release. We do not promise that all processing stays in Switzerland or that an EU storage setting covers every transfer. Applicable requirements for safeguards or a permitted transfer exception still apply; contact us for information about a transfer affecting your data.

7. Optional services

Planned optional services include Google AdMob rewarded advertising, Unity IAP and app-store purchases, Firebase notification delivery and Apple sign-in. They are disabled in the documented development test; an installed software package does not, by itself, mean its optional feature is active.

When enabled, these features may involve provider/account identifiers, consent choices, installation or notification identifiers, purchase proofs, interactions or diagnostics, depending on their actual configuration. We will check and disclose the enabled processing before activation, with any required notices and choices. This is not a claim that every potential SDK data category is currently collected.

Stores handle payment entry; the game handles verification and delivery. Notification permission, advertising consent and purchase approval are separate choices. Activating one does not authorize the others.

8. How long information stays

Approved retention schedule

On 5 October 2026, the studio approved the following ordinary retention limits. These are the chosen policy periods; the new cleanup processes still need to be implemented and verified.

• Routine server and connection logs: 30 days from creation.
• World and clan chat: 90 days from message creation. A copy needed as evidence in a safety or moderation case follows that case’s schedule.
• Support tickets and support email: 12 months after the request is resolved. This includes website ticket records and related mailbox copies. Unresolved requests are retained only while necessary to resolve them.
• Moderation reports, evidence and appeals: 12 months after final case closure.

Limited legal or safety exceptions may require specific records to be held longer. Such a hold must have a documented reason, restricted access and review, and end when the need ends. These periods do not prevent earlier deletion where appropriate or required by law.

Current handling and other records

The new cleanup schedule is not active yet. Routine logs, chat, support and moderation records can remain until reviewed and removed; support tickets and mailbox copies currently have no automatic expiry. Approval of the periods has not itself deleted records. We will update this notice when the corresponding cleanup processes have been verified and activated.

• Active accounts and progress: retained to provide the game. Verified deletion removes or de-identifies associated records as appropriate, while preserving other players’ independent progress and necessary shared-record integrity.
• Managed game backups: the documented scheduled game-backup job rotates its files after 30 days. This does not cover every provider disk backup, manually saved development copy, mailbox or historical third-party record. Private PC backup copies are separately encrypted.
• Deletion-suppression and provider-cleanup records: minimal protected identity references prevent deleted accounts from being restored and support unfinished provider deletion. Their purpose-specific retention and review rules still need to be finalized. The ordinary log/chat limits do not automatically remove these safeguards or justify keeping unrelated information indefinitely.
• Payment, accounting and legal-claim records, where applicable: follow the relevant legal obligation or necessary claim period, rather than the ordinary chat/log schedule. Applicable periods must be confirmed before the corresponding services are enabled.
• Providers and historical copies: need separate handling. Game-database deletion does not prove that all backups or third-party copies have already disappeared.

You may request deletion of a ticket, correspondence or game account. We assess any narrow retention needed for legal obligations, unresolved disputes, safety or prevention of restored deleted data, and explain the reason and applicable period or criteria. Activating the approved cleanup schedule, resolving the outstanding categories and provider follow-up still need to be completed for wider release. We do not promise instant erasure of every copy or claim that unimplemented deadlines are already enforced.

9. Your choices and rights

You can browse without submitting a form, use available guest play without an email, avoid optional chat or Discord, and decline optional services. Essential account and gameplay data are necessary for online play. Your support name is optional. The deletion form requests a Player ID; if you have lost it, contact support for recovery without app access. Use our Delete account page to request account and associated data deletion.

Depending on applicable law, you may request access, correction, erasure, restriction or a portable copy of your information, object to processing based on legitimate interests, withdraw consent where processing relies on it, and complain to a competent authority. Withdrawal does not make earlier lawful processing unlawful. We may need proportionate verification to protect your information. Deleting your game account does not delete your external Google, Apple or Discord account.

In Switzerland, you can contact the Federal Data Protection and Information Commissioner. Where applicable, you can contact your local supervisory authority. Our support process does not limit these rights or applicable legal deadlines.

10. Teenagers and children

Conquest Unlimited is intended for teenagers and adults aged 13 and older. The documented test restricts known under-13 accounts and keeps optional advertising, purchases and remote push disabled. Country-specific eligibility and consent safeguards remain relevant; a 13+ label or self-declared age is not a substitute for them.

If you believe an account belongs to someone under 13, contact support. A parent or guardian can ask about a child’s information without having the game installed. Please avoid sending unnecessary details about the child. Where a feature requires parental authorization under applicable law, it must not be enabled without the required process.

11. Changes to this policy

We update this page when the game, website, enabled providers or data handling changes and communicate material changes through appropriate official channels. The date and version appear above. Old acceptance is not treated as new consent for additional optional processing.

Related information: Terms of Use and Game Rules & Code of Conduct.