Empirewake: Kingdoms at War · XXI Online Games

Privacy Policy

Last updated: September 13, 2026

Your choice: Empirewake is an online multiplayer strategy game. Account and game data are necessary to operate your kingdom. Optional Firebase usage analytics in the Android and iOS apps are off until you agree. You can decline without losing game features, or change your choice in Settings → Privacy & Data. No advertising IDs, no ad targeting, and no sale of your personal data.

Who we are

XXI Online Games is the trade name of STROESCU CONSTANTIN-CATALIN PFA, the data controller.
CUI (Tax ID): 51846706
B-dul Bucureștii Noi 136, et. parter, ap. 5
Sector 1, București, Romania

Contact: [email protected].

This policy covers Empirewake: Kingdoms at War, including the mobile apps (com.empirewake.app) and the browser game.

Data needed to run the game

Account access: your Warden name and account ID, authentication sessions, and a device credential for guest play. If you register or link an email, we store the email address. New accounts use emailed six-digit verification and sign-in codes, without a password. Older accounts may still have a securely hashed password from the previous sign-in system. Verification, sign-in and deletion-confirmation emails are sent through our email provider, Google/Gmail. Guests can play without providing an email.
Your kingdom: buildings, decorations, progress, resources, purchases, battles, guild membership and other game actions are stored on our servers. The client caches assets and some state locally for faster loading; these caches are not the authoritative save.
Communication: player mail, Banner Guild chat, reports and support requests. Messages you send are visible to their recipients; guild chat is visible to the guild. Public profile and shared-world information are visible to other players. Do not include sensitive personal information in names or messages.
Safety and reliability: IP addresses and technical request, authentication, error and security information needed to run the service, investigate abuse and prevent fraud. We do not use this operational information for advertising.
Purchases: product IDs, store transaction/receipt information and your game account identifier are processed by Apple/Google, RevenueCat and our server to deliver goods, reconcile refunds and support purchases. We do not receive your payment-card details.

Message moderation

Where moderation is configured, message text is sent to OpenAI's moderation service to check for harmful content. Provider unavailability does not prevent delivery; a message can therefore reach another player without that check. Reports and abuse investigations may involve human review. Messages are not sent to Firebase analytics. See OpenAI's privacy policy.

Optional usage analytics

On first launch, the mobile app asks whether to allow Google Analytics for Firebase. Before consent, analytics collection is disabled and Empirewake does not send analytics events. Declining leaves analytics off. The browser version currently does not use Firebase analytics.

If you allow it, analytics includes app sessions, app/OS versions, device model and language, approximate region derived by Google's service, and a small set of main-screen events (Hold, Reach, Heroes and profile/settings). Firebase assigns a random app-installation identifier. This is pseudonymous installation data, not a guarantee that no identifiers are processed. We do not attach your Warden ID, email, message contents or game save to analytics. The Firebase SDK may automatically record in-app purchase events, such as product, value and currency, while analytics is enabled. We do not forward RevenueCat customer profiles or payment-card data to analytics.

Advertising ID access and advertising consent are disabled, including for players who allow analytics. We do not use this data to target ads or connect the installation identifier to RevenueCat. We use aggregate reports to understand usage and improve the game. See Google's privacy policy and Firebase privacy information.

Change your choice under Settings → Privacy & Data. Turning analytics off stops further collection and resets local analytics data and the installation ID. It does not itself erase events already received by Google. To request deletion of earlier analytics, use Show analytics ID and copy the ID before turning analytics off, then follow our data-deletion instructions.

Why we process data

We process account, gameplay and purchase information to provide the game and fulfil your requests; security and abuse-prevention information for our legitimate interest in a safe, reliable service; necessary financial records to meet legal obligations; and optional analytics on the basis of your consent. You may withdraw analytics consent at any time without affecting earlier lawful processing.

Service providers and international processing

Hosting and infrastructure providers process server data on our behalf. Google/Gmail delivers account emails; Google Firebase processes opted-in analytics; OpenAI provides message moderation; RevenueCat and the platform stores support purchases. Data may be processed outside your country, including in the United States. Applicable provider contracts and transfer safeguards govern that processing. We may disclose necessary information to comply with law, protect accounts or investigate fraud. See RevenueCat's privacy policy.

Retention and deletion

Delete your account directly from your Warden profile under Settings → Account → Delete account, including a guest account. Review the consequences, complete the ownership check and confirm. Your account is closed immediately when the request is accepted; background cleanup and its progress are shown in the game. If you cannot access the app, use the email option on our account and data deletion page.

Account and progress data are retained while your account is active, until you request deletion, or while necessary to resolve a specific support, security or legal matter. Deletion removes private account data and access. Some shared-world, battle, guild and financial records must remain to preserve other players' history, prevent duplicate purchase delivery, handle refunds, and meet legal obligations. Retained game records use a replacement identity where appropriate; we do not describe all retained data as anonymous.

Opted-in event-level analytics is retained according to the Google Analytics property's retention setting; aggregated reports may remain longer. You can request earlier deletion using your installation ID. Operational logs and backups are restricted to service operation and recovery. Data that must remain in backups is removed through backup replacement rather than immediate editing of every backup. Contact us for the retention applicable to a particular record or request.

Account deletion steps and other data requests

Your rights

Depending on where you live, you may request access, correction, deletion, restriction or a portable copy of your personal data, object to certain processing, and withdraw consent. Contact us at the email above. We may ask for proportionate proof of ownership; never send a password or an email verification code. We normally respond within one month and will explain any lawful extension. You may complain to your local supervisory authority, including Romania's ANSPDCP.

Children, security and updates

The game is not directed at children under 13. If a child has supplied personal data without the required permission, contact us so we can investigate and address it. Where a higher consent age applies, a parent or guardian must authorize optional analytics. We use access controls and authentication safeguards, but no online service can promise absolute security. We update this policy when our practices change and show the latest date above. Material changes to optional collection will require an appropriate new choice.