Privacy Policy

Conquer, by Second 21 · Last updated 18 October 2026

This policy explains what information Conquer collects, why, where it is kept, who it is shared with, and the choices you have. Conquer is made by Second 21, a business in Queensland, Australia ("we", "us"). We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Who Conquer is for

Conquer is for players aged 13 and over. It is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has an account, contact us and we will delete it.

What we collect

• An account ID. When you first play, Google Firebase Authentication creates a random ID for you (a "guest" account). It contains no name or contact details.
• Your game progress. Levels and boards completed, puzzles solved, skins owned and equipped, settings (sound, music, board size, dot colour and similar), and your match history. It is kept on your device and backed up to your account, so it is not lost and can follow you to another device.
• If you sign in with Google: your name and email address, which Google shares with us when you choose to sign in. We use them to show who is signed in and to link your devices to one account. We never see your Google password.
• If you play online: the nickname you choose, your player ID (for example #ABCDEF), the rooms you create or join, the moves played, match results, points and leaderboard position, your friends and blocked lists, and when you were last active in a room or online.
• If you turn on reminders (Android app): a notification token for each of your devices, the reminder setting you chose, and your time-zone offset, so a daily reminder arrives at a sensible hour.
• Ads. In the Android app, ads are shown by Google AdMob. Google may collect information such as your device's advertising ID, IP address, approximate location, device type and how you interact with ads, to show, measure and (where you allow it) personalise ads. We keep a count of rewards you have earned from ads (for example, extra rooms) and, on your device only, when ads were last shown, so they are not shown too often.

We do not collect your precise location, contacts, photos or files, and we do not ask for payment details. When you buy a skin or a Plus or Premium plan, payment is handled by Google Play (or, on the website, by Stripe); we receive a record of the purchase, such as the plan and when it renews or ends, not your card details.

How we use it

• to run the game, save your progress and keep your devices in step;
• to run online play: rooms, matches, friends, points, the leaderboard and reminders;
• to show ads and give you the rewards you earn from them;
• to keep the game fair and secure, and to fix problems.

We do not sell your personal information, and we do not use it for anything else.

What other players see

Online, other players can see your nickname, player ID, points and leaderboard position, whether you have been active recently, and the moves of matches you play with them. They never see your email address or your Google name unless you use it as your nickname.

Where it is kept, and who we share it with

Your information is stored with Google Firebase (Google LLC), in Google's data centre in Singapore. Google provides the database, sign-in, notifications and hosting for us and processes information on our behalf. Google AdMob shows ads in the app under Google's Privacy Policy (see also how Google uses information from apps that use its services). If you buy a plan, RevenueCat (RevenueCat, Inc.) manages it for us and receives your account ID and your purchase records from Google Play or Stripe, under RevenueCat's Privacy Policy. Because these services are run outside Australia, your information is disclosed overseas, mainly to Singapore and the United States. We share information with no one else, except where the law requires it.

Your choices about ads

• In the European Economic Area, the United Kingdom and Switzerland, the app asks for your consent before personalised ads, and Settings → Ads → Privacy choices lets you change your answer at any time.
• On Android you can reset or delete your advertising ID, or opt out of personalised ads, in your phone's Settings (Google → Ads, or Privacy → Ads).
• Ads that give rewards are always optional: you choose whether to watch them.

How long we keep it

We keep your information while your account exists. Online matches that go a week without a move end on their own. You can delete your account at any time (below).

Deleting your account

In the game, go to Settings → Account → Delete my account. You will be asked to confirm.

• Google accounts sign in with Google once more to confirm it is really you, and are then deleted after 30 days. Until then you can sign back in and cancel.
• Guest accounts are deleted straight away.

Deleting removes your progress, settings, profile, nickname, player ID, points, friends and blocked lists, reminders, ad rewards and match history from our database, closes the rooms you created and leaves the ones you joined (a match still being played counts as left), and deletes your sign-in account. We keep only a record that your account ID was deleted, and when, so that none of your information reappears. Other players' own match histories still show the nickname you had when you played them. Google may keep some information for a limited time under its own policies.

You can also ask us to delete your account without the app — see Delete your Conquer account.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it, by contacting us. You can change your nickname in Settings at any time. If you are unhappy with how we have handled your information, please contact us first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au). If you live in the European Economic Area or the United Kingdom you also have rights under the GDPR, including to object and to complain to your local data protection authority.

Security

Your information is sent over encrypted connections, and database rules mean each player can read and change only their own records. No system is perfectly secure, but we work to protect your information and will tell you if a breach puts you at risk.

Changes to this policy

If we change this policy we will update the date at the top, and tell you in the game if the change is significant.

Contact us

Second 21, Queensland, Australia · support@second21.com.au