Privacy policy

1. Data controller

[RAZÓN SOCIAL], tax ID [NIF], registered at [DOMICILIO], is the controller of the data processed in the Conqr·IA app and on conqria.app.

For any privacy question you can write to [EMAIL DE PRIVACIDAD].

Data Protection Officer: [EMAIL DPO].

2. What data we process

We only process what the game needs to work:

• Runner identity: the public address of the wallet the app creates on your device. We do not ask for an email or a password. The private key is stored only on your device and never reaches us.
• The alias and display name you choose for the map and the leaderboards.
• Activities: date, distance, duration, pace and the map areas you conquer or defend.
• GPS trace: we receive it when each run ends, only to work out your territory. Once processed it is deleted; we do not keep your route.
• Game data: territories, season and league scores, events, friends, clans and notifications.
• Push notification token, if you enable notifications on your device.
• Strava, only if you connect your account: we import your runs and process them just like the ones recorded in the app.
• Usage analytics, only if you accept it: which features you use and when (for example, starting or finishing a run), linked to an internal identifier. It never includes your GPS location, your alias or your wallet, and we do not record the screen. As with any internet connection, PostHog technically receives your device’s IP address; we ask it not to use it to geolocate you.
• Website waitlist: your email, if you sign up.
• Server technical logs (such as the IP address) for security and to limit abuse.

3. Purposes and legal basis

• Providing the service (account, runs, territory, leagues, events and social features): performance of the contract you accept by using the app (Art. 6(1)(b) GDPR).
• Usage analytics to improve the app: your consent (Art. 6(1)(a) GDPR). We ask for it the first time you open the app and you can withdraw it in Settings at any time.
• Waitlist: your consent when you leave your email.
• Fair play and security (detecting faked activities, preventing abuse): our legitimate interest in a fair game and a secure service (Art. 6(1)(f) GDPR). Anti-cheat reviews are automatic and never expose your route publicly.

4. What other runners see

Your alias, your territories on the map and your in-game activity are visible to other runners. Your wallet is not shown on your public profile.

By default you appear on the global public leaderboard with your alias and your stats; you can hide yourself in Settings.

Your division standings in the league are visible to the other participants of the season. [REVISAR: league visibility pending a decision.]

[REVISAR: if territories are ever recorded on a public blockchain (Polygon), the wallet address and territory identifiers would end up in a public, immutable record that we cannot delete. Describe it here before enabling it.]

5. Who we share data with

We do not sell your data. These providers process it on our behalf and under contract:

• Contabo GmbH: server (VPS) in the European Union hosting the API and the database.
• Vercel Inc.: hosting of the conqria.app website.
• PostHog Inc.: usage analytics, only if you accept it. [REVISAR: the app currently points to PostHog’s US server (international transfer). The right host depends on the region the PostHog project was created in.]
• Expo (650 Industries, Inc.), Apple and Google: delivery of push notifications. [REVISAR: international transfers.]
• Strava: only if you connect your account; Strava processes that data under its own policy.

6. How long we keep it

• Account and game data: for as long as you keep the account.
• GPS trace: deleted as soon as the run is processed.
• When you delete your account from Settings there is a 72-hour waiting period; after it, your account and your game data are deleted.
• Waitlist email: until launch or until you unsubscribe, at most [PLAZO WAITLIST].
• Analytics: [PLAZO DE RETENCIÓN EN POSTHOG].
• Technical logs: [PLAZO DE LOGS].

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability. Most of them directly in the app:

• Access and portability: Settings > Privacy > Download my data (full copy in JSON format).
• Rectification: change your alias in Settings.
• Erasure: Settings > Delete account (completed after 72 hours).
• Withdraw analytics consent: Settings > Share usage data.
• Hide yourself from the public leaderboard: Settings > Appear in the public ranking.
• For anything else, write to [EMAIL DE PRIVACIDAD]. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).

8. Security and minors

Communications with our servers are encrypted (TLS) and access to our systems is restricted.

Conqr·IA is not intended for anyone under 18. When you sign up, the app asks for your date of birth only to check this on your device: it is never sent to us and we do not store it.

9. Changes to this policy

If we change how we process your data, we will update this page and let you know in the app when the change is relevant.