Effective date: April 27, 2026 · Last updated: July 26, 2026
This website (xxi.online) is operated under the trade name XXI Online Games ("we", "us") by:
STROESCU CONSTANTIN-CATALIN PFA
CUI (Tax ID): 51846706
B-dul Bucureștii Noi 136, et. parter, ap. 5
Sector 1, București, Romania
For the purposes of the EU General Data Protection Regulation (GDPR), this entity is the data controller for any personal data processed through this website. You can reach us at [email protected].
This Privacy Policy covers the public marketing website at xxi.online only. Each game or app we publish has its own privacy notice that governs in-app data handling. For our flagship title see the MOGUL — Empire Tycoon Privacy Policy.
xxi.online is a marketing site. It does not have user accounts, logins, contact forms, newsletter sign-ups, or in-site payments. Purchases of our games happen on Google Play or the Apple App Store under those platforms' own terms and privacy policies.
When you visit this website, the following limited data is processed:
This website sets no cookies at all. There is no analytics cookie, no advertising cookie, and no session cookie - so there is nothing to consent to and no cookie banner to dismiss. Blocking cookies in your browser will not affect the site in any way.
We do not sell, rent, or share personal data with marketing partners. The only third parties involved are the infrastructure providers listed above (hosting and static asset CDNs). Each acts as a processor or independent controller under its own published terms.
We transfer no data outside the EU/EEA ourselves. Some of the static asset CDNs listed above operate globally, so a request from your browser for a font or stylesheet may be served from a node outside the EU/EEA; the providers involved participate in the EU-U.S. Data Privacy Framework or rely on Standard Contractual Clauses, which provide an appropriate transfer mechanism under Chapter V GDPR.
Under GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to lodge a complaint with a supervisory authority (in Romania, the ANSPDCP). In practice this site holds almost nothing about you: short-lived server access logs are the only record we keep, and they are not tied to an identity. For any request, email [email protected] and we will respond within 30 days.
This website is not directed at children under 16. We do not knowingly collect any personal information from children. If you believe a child has provided data through this site, contact us and we will delete it.
The site is served over HTTPS. We apply standard administrative and technical measures to protect any data we process. No internet transmission is ever 100% secure, but the limited nature of what this site processes (effectively just short-lived server access logs) keeps the impact of any breach low.
If this policy changes, the "Last updated" date at the top of the page will change. Material changes will be highlighted on the homepage for a reasonable period.
Questions about this Privacy Policy? Email [email protected].