EMPIRE X

DATA PROTECTION

Privacy policy

Updated: 3 September 2026

1. Introduction

The data controller is EMPIRE GLOBAL SOLUTIONS S.R.L. This policy covers empirex.tech, Empire Shop, CODE X (empirex.tech/play), Debug Studio, forms, newsletter, client portal, careers, initiative, licence issuance and service delivery.

2. Data categories

We may process:

  • Identity and contact: name, email, phone, company, role.
  • Tax data: tax ID, billing address, invoice data.
  • Order data: products, amount, currency, status, history.
  • Technical data: IP, logs, device, browser, security events.
  • Communications: form messages, support emails, tickets.

3. Empire Shop data

At checkout we collect data needed to complete the order and digital delivery:

  • contact and billing details;
  • payment confirmations from Stripe / PayPal (without storing full card data on our servers);
  • licence keys, download links and activation logs;
  • language preferences and order history in the client account, if any.

Payment processors handle card data under PCI-DSS standards.

4. Tools, forms and portal data

In addition to the shop, we may process data from:

  • Debug Studio / tools (submitted URL, technical metadata, session);
  • get-quote, contact and booking forms;
  • careers and initiative / mentorship (CV, portfolio, messages);
  • client portal (activity, tickets, project documents);
  • newsletter (email, preferences, open events where lawful).

4b. CODE X game accounts

CODE X at empirex.tech/play uses EmpireX cloud operator accounts. We process:

  • Account: email, username/callsign, password hash, locale, avatar files on EmpireX servers;
  • Access: Signal Pass status, device registry (up to 3 devices), session and activation/reset tokens;
  • Community: Operator Hall posts and photos, friends, private direct messages (friends only), support tickets, public ranks/social stats;
  • Media: avatar and Hall images stored under durable server media storage (.data/codex-media), served via authenticated write APIs;
  • On-device cache: session token, device id and local game progress/settings in browser storage (not a substitute for the server account).

Product upgrades and deploys are designed to preserve the player database. Clearing browser storage logs you out locally and removes the local cache; it does not delete your cloud account. In-app CODE X legal pages and this policy both apply.

5. Purposes

We process data to:

  • fulfil orders and deliver digital products;
  • issue invoices and keep accounting records;
  • activate / validate licences;
  • provide technical and commercial support;
  • secure the platform and prevent fraud;
  • send operational communications about an order or project;
  • send newsletters only with consent.
  • careers and mentorship selection / communication;
  • operating public tools (Debug Studio) and abuse prevention;
  • scheduling and commercial follow-up;

6. Analytics and advertising

With consent (where required), we use tools such as Google Analytics / Ads and Meta Pixel to measure traffic and optimise campaigns. You can manage preferences via the cookie banner.

7. Legal basis

Bases include:

  • performance of a contract (order, licence, project);
  • legal obligations (tax and accounting);
  • legitimate interest (security, service improvement, defending rights);
  • consent (marketing, non-essential cookies).

8. Recipients

We do not sell personal data. We may share data with:

  • Stripe, PayPal and payment institutions;
  • cloud / email / hosting providers under contracts;
  • accountants, auditors and technical collaborators bound by confidentiality;
  • legal counsel: contact@avocatmariavasii.ro;
  • public authorities when required by law.

9. International transfers

If a provider processes data outside the EEA, we apply appropriate safeguards (standard contractual clauses or equivalent) where required.

10. Security

We apply encryption in transit, access control, logging, role segregation and incident response procedures. No method is 100% infallible; we report incidents as required by law.

11. Retention

We keep data for the relationship duration and thereafter for statutory periods (including tax). Security logs are kept for limited periods. Marketing data until consent is withdrawn. Licence keys and order history for as long as needed to perform the contract and defend rights.

12. Your rights

Under the GDPR you may request:

  • access and rectification;
  • erasure where the law allows;
  • restriction or objection;
  • portability;
  • withdrawal of consent.

13. Cookies

Cookie details are in the Cookie policy. Non-essential cookies are used only with consent.

14. Minors

Services and the shop are not directed to persons under 18. We do not knowingly collect minors’ data.

15. Contact

GDPR requests: business@empirex.tech. Legal matters: contact@avocatmariavasii.ro.

16. Changes

This policy may be updated. The current version is on this page with the update date.

Connect