Flag Conquest — Privacy Policy

Last updated: September 14, 2026

Flag Conquest is built to respect your privacy. We collect only the minimum needed to improve the game and to run optional features like the leaderboard and the optional account sign-in. Optional sign-in data is described below. We do not collect your location, contacts, or payment details, we never see your password, and we do not use predatory ads or third-party trackers. On PC and web there are no ads at all; the free Android version offers optional watch-to-earn ads you choose to play, described in full below.

What we collect

Anonymous run summaries: when a run ends, the game sends an anonymous summary of that run. It covers how the run went and nothing about you: the zone and depth you reached, flags captured, how long it lasted, how it ended, enemies, elites and bosses defeated, how much each of your unit types fought, your hero class and level, gold, gems and shards earned and what you spent them on, buildings, structures, relics, regalia and modifiers, recruits offered and taken, your auto-buy settings, and a zone by zone outline of the run. It also carries your game version, your platform (web, Android, or Steam), your language setting and whether your screen is small, medium or large. A random ID is stored on your device to group your own runs together over time. It is not linked to your identity in any way, and none of it is shared with anyone else.

Leaderboard (optional): only if you turn on "Auto-submit runs to global leaderboard" and set a player name, the game submits that chosen name and your score. This is off unless you enable it.

Account sign-in (optional): you can sign in with Google, or with an email address and a password. Firebase Authentication stores your email address and account ID. For Google sign-in, it also stores your Google display name and profile photo URL if Google provides them. Your Google display name may be your real name. The game uses your account ID to identify your cloud save. Signing in is optional and the game is fully playable without it. We never store your password: sign-in is handled entirely by Firebase Authentication, a Google service, and a password you type goes to them and never to us.

Cloud save (optional): if you choose "Upload Save to Cloud", your game progress and chosen player name are stored under a random PIN that you use to restore the save elsewhere. PIN uploads happen only when you press the button. If you are signed in, your progress and that same chosen player name are also kept under your account so they follow you between devices, and that copy updates by itself while you stay signed in.

What we do not collect

We do not collect precise location, your contacts, or any device identifier tied to you, and we never store your password: sign-in is handled by Firebase Authentication, a Google service. There are no predatory ads, and no third-party analytics or tracking tools.

The one exception is the optional rewarded ads in the free Android version. When you choose to watch one, Google AdMob may use a resettable advertising identifier from your device to serve and measure that ad. It never happens unless you press the button, and it never happens at all on PC, web, itch, Steam, or in the demo. See "Optional rewarded ads (Android free version only)" below.

Your account

Signing in is optional, with Google or with an email address and a password. It is offered in the full browser and Steam versions and supported Android versions of the game. Sign in to the same account to use the same Firebase cloud save on these platforms. The demo stays guest-only and uses PIN cloud saves to transfer progress to the full game.

On Android, Google sign-in opens the native Google account chooser. The game does not ask you to enter your Google password in its embedded browser. On Steam, Google sign-in opens your system browser and returns the sign-in result to the game through a temporary connection on your own computer.

If you do sign in, Firebase Authentication stores your email address and account ID, plus the display name and profile photo URL supplied by Google if you use Google sign-in. The game uses your account ID to identify your cloud save. We never store your password. If you forget it, the reset link comes from Firebase Authentication and the new one is set on their page, not ours.

While you are signed in, your progress belongs to your account. Signing out saves it to your account first and then removes it from this device, which returns the device to a fresh start; signing back in, here or anywhere else, brings your progress with it. If your progress cannot be saved to your account at that moment, the game refuses to sign out and tells you so rather than removing anything.

Deleting your account

You can delete your account from inside the game: open Settings, then the Account tab, then DELETE ACCOUNT under DANGER ZONE. That removes your cloud save, the account itself including your email address, account ID and any Google display name and profile photo URL stored in its sign-in record, and the progress saved on this device. It cannot be undone. If you want to clear this device without deleting your account, RESET SAVE in the same place does that instead.

If you cannot open the game, the account deletion page published beside this policy explains the same steps and how to ask us to do it for you, or you can email the developer at playkaramilabs@gmail.com. Cloud save documents are deleted immediately, and no backup of ours keeps them afterwards.

Two things cannot be removed this way, and both are pseudonymous rather than personal: a leaderboard entry, which is filed under the display name you chose and not under your account, and an arena defence, which is filed under a random ID stored on your device. Ask us and we will remove either one for you.

Purchases

On some platforms Flag Conquest is sold as a paid purchase (for example on Steam). Payments are handled entirely by that platform’s own store, and we never see or store your payment details, billing information, or purchase history. Refunds follow the store’s policy.

Optional rewarded ads (Android free version only)

The free Android version offers two optional rewarded ads, and only two. One is a floating drop you may tap during a run to watch a short video for a doubled reward. The other appears when a run ends, where you may watch a short video to carry 20% of your gold forward. Both are always started by you. There are no forced ads, no interstitials, no banners, and no ad ever interrupts play on its own. If you never press the button, you never see an ad.

These ads are served by Google AdMob. To serve and measure them, Google may process device identifiers such as your advertising ID, along with ad interaction data like whether an ad was shown, watched, or clicked. We do not receive your identity from Google, and we do not send Google your game progress, your player name, or your run history.

Where consent is required, including the EEA and the UK, the game asks for your ad choices before any ad loads, and uses non-personalized ads if you do not consent. You can change your ad preferences at any time in Settings. For how Google handles this data, see Google’s privacy policy at https://policies.google.com/privacy and Google’s description of how its partners use data at https://policies.google.com/technologies/partner-sites.

The PC, web, itch, Steam, and demo versions of Flag Conquest contain no ads and no advertising SDK at all.

How your data is used

Run summaries help us balance difficulty and decide what to improve next. Leaderboard data powers the global and daily rankings. Cloud saves let you back up and transfer your progress. That is all. We do not sell your data, and we never use it for predatory advertising. None of the data described above is shared with advertisers: the optional rewarded ads on Android are handled entirely by Google AdMob and stay separate from your game data.

Your choices

You can turn anonymous analytics off at any time in Settings under the Account tab. The leaderboard is off unless you opt in, and PIN cloud saves upload only when you press the upload button. Account cloud saves update automatically while you are signed in. Signing in is optional, and if you have signed in you can sign out or delete the account from the same tab. On the free Android version, rewarded ads only ever play when you choose to watch one, and your ad preferences can be changed at any time in Settings.

Where your data is stored

Data is stored using Google Firebase (Cloud Firestore), which acts as our backend provider. See Google’s privacy policy for how they handle infrastructure data.

Children’s privacy

Flag Conquest is a general-audience game and is not directed at children under 13. We do not knowingly collect personal information from children. An account is optional, and no personal information is required to play.

Changes to this policy

We may update this policy as the game evolves. The "Last updated" date above always reflects the current version.

Contact

Questions about this policy? Contact the developer at playkaramilabs@gmail.com.