Conquer

Privacy notice and legal notice

Conquer is a hobby game, not for profit. We keep the minimum needed for you to play and to keep the server safe. We do not ask for your email address, and there are no ads, no analytics, no trackers and no third-party resources.

Last updated: 2026-11-04. The Spanish version (Aviso de privacidad) is the legally binding one.

1. Who is responsible

Juan Manuel Méndez Rey, a private individual in Spain. Email for anything about your data: conquer@vejeta.com.

2. What is processed, why and for how long

DataWhy and legal basisKept
Account name, password hash and recovery-code hashSo you can sign in and play. Contract (GDPR 6.1.b). Prefer a nickname. The recovery code itself is not kept: only its hash.Until you ask for the account to be deleted. An undecided request is deleted after 30 days.
Game data: nation, moves, in-game messages, scoresIt is the game. Contract (6.1.b). The public parts (nation names, scores, news) show in the Hall and the status page, never with your account name.Until you ask for the account to be deleted, or the season ends.
IP address, time, URL and browser (user agent), in the web server logsSecurity and abuse control. Legitimate interest (6.1.f).7 days.
fail2ban bans (IP address)Stopping repeated password guesses. Legitimate interest (6.1.f).1 hour.
Encrypted backups of the game worldBeing able to restore the game. Legitimate interest (6.1.f).The last 30 copies.

We do not ask for or keep an email address, a phone number, a location or anything else. There are no ads, no analytics and no trackers, and the site loads no files from other websites.

3. Where, and who is involved

  • Servers: OVH (OVHcloud), in France.
  • PiensaSolutions, in Spain, only for the notification mails to the administrator when someone asks for a seat. Those mails carry no player data beyond the account name.
  • Encrypted backups on the owner's own storage, in Spain.

Everything is inside the European Union: there are no international transfers. We give data to the authorities only when the law requires it.

4. Cookies and local storage

Only what is strictly necessary, so there is no banner (LSSI-CE, article 22.2).

  • conquer_session (cookie, HttpOnly, Secure): keeps you signed in. It lasts until you close the browser, or 30 days if you tick "Remember me". Sign out to remove it.
  • Local storage in your browser: language, settings and the practice world (/try/, which runs in your browser). It is never sent to us.

5. Your rights and deleting your account

You can ask for access, rectification, erasure, restriction, objection and portability. Write to conquer@vejeta.com with your account name; we answer within one month. To delete your account, write to that address. Backups lose it as they are replaced.

If you think we handle your data wrongly you can complain to the Spanish data protection agency: https://www.aepd.es.

If you forget your password, use the recovery code shown to you once. Without the password and the code the account cannot be restored: you can join again next season.

6. The Android app

  • Permissions: INTERNET, VIBRATE and POST_NOTIFICATIONS.
  • The turn alert is a local notification created on your phone. There is no push service.
  • Your account and password are stored on the device only if you choose "remember". "Forget account" or uninstalling the app erases them.

7. Children

Children under 14 may play with the permission of a parent or guardian. Keep in mind that players can send messages to each other in the game. A parent or guardian can ask us to delete an account by writing to conquer@vejeta.com.

8. Donations

They are voluntary and give nothing in return. They go through Liberapay, which is a separate controller of its own data. We receive no payment data.

Back to Conquer