EmpireBattles

Privacy Policy

Last updated: October 26, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. We collect, use, and disclose Your information as described in this Privacy Policy and, where required by applicable law, only where We have a valid legal basis to do so, including Your consent (where consent is required).

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Collecting and Using Your Personal Information

Types of Data Collected

Account Data

When You create an Account We collect: Your username, Your email address, and a password that We store only as a one-way hash (We cannot read it). If You turn on two-factor sign-in, We also keep the settings needed for it and a list of the devices You asked Us to remember. We do not ask for Your real name, address or telephone number to play.

Game Data

We keep what You do in the Service: Your towns, armies, ranks, quests and items, the Worlds You joined, Your EBC balance, and the messages You send in chat, private mail and forums, including reports You send about other players. Other players can see Your username, rank and activity in a World. Your email address is never shown to other players. Staff may read messages and reports to enforce Our rules. Messages in public areas can be read by other players.

Payment Records

When You buy something We keep a record of the Purchase: what You bought, when, the amount and currency, the payment processor's reference number and status, and the EBC, Items or Membership it gave. We also keep the records of refund requests, reversed payments and account holds. We do not see or store Your payment card details; they are handled by the Payment Service Providers named below.

Usage Data

Usage Data is collected automatically when using the Service. It includes Your Device's Internet Protocol address (IP address), sign-in records (time, the type of Device, its operating system, a device identifier used to remember a device You chose to trust, and the Application version), the pages of Our website that You visit, and logs of important actions on Your Account, so that You can see and end Your sessions and so that We can protect the Service from abuse.

Cookies and Similar Technologies

The website and the Application use only the cookies and local storage needed to keep You signed in, to remember Your choices (such as a remembered device) and to keep the Service secure. We do not use advertising or tracking cookies.

Information We Do Not Collect

The Application does not collect Your location, photos, camera, contacts or microphone.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

We may share Your Personal Data in the following situations:

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with Our legal obligations, resolve disputes, and enforce Our legal agreements and policies. The periods below are maximums and We may delete or anonymize data sooner.

We may keep Personal Data longer where the law requires it, where it is needed to establish, exercise or defend legal claims, where You ask Us to, or where it exists in backups that are scheduled for routine deletion. Backups are encrypted and kept for a limited time; deleted data can remain in backups until they expire and is not restored except where necessary for security, disaster recovery or legal reasons. In some cases We turn Personal Data into anonymous statistics that cannot be linked back to You; those may be kept indefinitely.

You may ask Us how long We will keep specific data about You by contacting Us.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices, at the data centers of Our hosting Service Providers, and in any other places where the parties involved in the processing are located. This means that this information may be transferred to, and kept on, computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction.

Where required by applicable law, We will ensure that international transfers of Your Personal Data are subject to appropriate safeguards. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

You may delete Your Account, update Your email address and change Your password in the account settings of the Application. You may also contact Us to request access to, correction of, or deletion of Personal Data.

Please note that We keep certain records, without Your personal details, when We have a legal obligation or a lawful basis to do so, as described in "Retention of Your Personal Data" above.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, the Company may disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other Legal Requirements

The Company may disclose Your Personal Data in the good-faith belief that such action is necessary to:

Security of Your Personal Data

The security of Your Personal Data is important to Us. We store passwords only as one-way hashes, offer two-factor sign-in, sign Our software updates, and keep encrypted backups. But remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.

Detailed Information on the Processing of Your Personal Data

The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies.

Payments

We provide paid products within the Service and use third-party services for payment processing.

We will not store or collect Your payment card details. That information is provided directly to the payment processor, whose use of Your personal information is governed by its Privacy Policy. We receive from the processor Your payment reference number, the amount, the status of the payment, and what was bought. The processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council.

GDPR Privacy

Legal Basis for Processing Personal Data under GDPR

We may process Personal Data under the following conditions:

The legal basis We rely on depends on the purpose of the processing:

Where the provision of Personal Data is a statutory or contractual requirement, or necessary to enter into a contract with Us, We will make this clear at or before the point of collection. For example, an email address is needed to create an Account. If You have questions about the legal basis for any specific processing activity, please contact Us.

International Transfer of Personal Data

We may transfer, store, and process Personal Data in countries other than the country in which You are located, including countries outside the European Economic Area ("EEA") and the United Kingdom ("UK"), where data protection laws may differ.

Where We transfer Personal Data outside the EEA/UK to a country that has not been recognized as providing an adequate level of protection, We rely on appropriate safeguards, such as transfers to recipients certified under the EU-U.S. Data Privacy Framework (and its UK Extension) where applicable, the European Commission's Standard Contractual Clauses and/or the UK International Data Transfer Agreement or UK Addendum, and supplementary measures such as encryption and access controls. You may contact Us to request further information about the safeguards We use.

Your Rights under the GDPR

The Company undertakes to respect the confidentiality of Your Personal Data and to guarantee You can exercise Your rights.

You have the right under this Privacy Policy, and by law where the GDPR or the UK GDPR applies to Our processing of Your Personal Data (including, in particular, if You are in the European Economic Area (EEA) or the United Kingdom (UK)), to:

Exercising of Your GDPR Data Protection Rights

You may exercise any of the rights described above by contacting Us. Please note that We may ask You to verify Your identity before responding to such requests. We generally respond within one month, and may extend by two further months where necessary, in accordance with applicable law.

You have the right to complain to a supervisory authority about Our collection and use of Your Personal Data. If You are in the EEA, please contact Your local data protection authority. If You are in the UK, You can complain to the Information Commissioner's Office (ICO).

Automated Decision-Making

Our systems check payment, EBC and Item records automatically, and can block a refund or place an Account on hold when they find a discrepancy or too many refund requests. A person reviews these cases before an Account is permanently affected, and You can contact Us to ask for that review. We do not make other decisions based solely on automated processing that produce legal effects concerning You or similarly significantly affect You.

CCPA/CPRA Privacy Notice (California Privacy Rights)

This privacy notice section for California residents supplements the information contained in Our Privacy Policy and it applies solely to visitors, users, and others who reside in the State of California.

Categories of Personal Information Collected

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or Device. The following is a list of categories of personal information which We may collect or may have collected from California residents within the last twelve (12) months. The categories are those defined in the CCPA/CPRA.

Under CCPA/CPRA, Personal Information does not include publicly available information, deidentified or aggregated consumer information, and information excluded from the scope of the CCPA/CPRA.

Sources of Personal Information

We obtain the categories of personal information listed above from the following categories of sources:

Use of Personal Information

We may use or disclose Personal Information We collect for "business purposes" as defined under the CCPA/CPRA, which include: operating the Service; providing support and responding to inquiries; processing Purchases; responding to law enforcement requests and as required by law; internal administrative and auditing purposes; and detecting security incidents and protecting against malicious, deceptive, fraudulent or illegal activity. If We decide to use Personal Information for materially different purposes, We will update this Privacy Policy.

Disclosure of Personal Information

We may use or disclose and may have used or disclosed in the last twelve (12) months the following categories of Personal Information for business purposes: Category A (Identifiers), Category B (Customer records), Category D (Commercial information), Category F (Internet or other similar network activity).

We disclose these categories to Service Providers (for example hosting, email delivery and payment processors), to Our affiliates, and to third parties to whom You or Your agents authorize Us to disclose Personal Information. When We disclose Personal Information to a Service Provider or contractor for a business purpose, We enter into a contract that describes the purpose, requires the recipient to keep that Personal Information confidential, and prohibits the recipient from using it for any purpose other than the limited and specified purposes stated in the contract, consistent with the CCPA/CPRA.

Sale or Sharing of Personal Information

We have not sold or shared Personal Information of California residents in the preceding twelve (12) months, and We do not sell or share Personal Information as those terms are defined in the CCPA/CPRA.

Retention of Personal Information

We retain California residents' Personal Information for as long as reasonably necessary to achieve the purposes described in this Privacy Policy, as described in the "Retention of Your Personal Data" section above.

Personal Information of Minors Under 16 Years of Age

The Service is for people who are 13 or older. We do not knowingly collect personal information from anyone under 13. We do not sell the Personal Information of any Consumer, including Consumers We know are under 16. If You have reason to believe that a child under the age of 13 has provided Us with personal information, please contact Us with sufficient detail to enable Us to delete that information.

Your Rights under the CCPA/CPRA

The CCPA/CPRA provides California residents with specific rights regarding their personal information. If You are a resident of California, You have the following rights:

Exercising Your CCPA/CPRA Data Protection Rights

To exercise any of Your rights under the CCPA/CPRA, and if You are a California resident, You can contact Us:

We may verify Your identity before responding to requests to know, delete, or correct Personal Information, as permitted or required by applicable law. Only You or an authorized agent acting on Your behalf may make a verifiable request relating to Your Personal Information. Your request must provide sufficient information that allows Us to reasonably verify You are the person about whom We collected Personal Information or an authorized representative, and describe Your request with sufficient detail that allows Us to properly understand, evaluate, and respond to it.

No later than 10 business days after receiving a request to know, delete, or correct, We will confirm receipt and provide general information about how We will process and verify the request and when You should expect a response. We will respond no later than 45 calendar days after receipt. If reasonably necessary, We may extend the response period once by an additional 45 calendar days. If We do, We will notify You during the initial 45-day period and explain the reason for the extension.

Do Not Sell or Share My Personal Information

We do not sell or share Personal Information as those terms are defined in the CCPA/CPRA. If Our practices change, We will update this Privacy Policy, provide the required opt-out methods, and honor opt-out preference signals such as the Global Privacy Control (GPC).

"Do Not Track" Policy as Required by California Online Privacy Protection Act (CalOPPA)

Our Service does not respond to Do Not Track signals. We do not track Your activity across other websites.

Your California Privacy Rights (California's Shine the Light law)

Under California Civil Code § 1798.83 (California's Shine the Light law), California residents with an established business relationship with Us can request information once a year about sharing their Personal Data with third parties for the third parties' direct marketing purposes. We do not disclose California customers' Personal Information to third parties for those third parties' own direct marketing purposes.

California Privacy Rights for Minor Users (California Business and Professions Code Section 22581)

California Business and Professions Code Section 22581 allows California residents under the age of 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted.

To request removal of such data, and if You are a California resident, You can contact Us using the contact information provided below, and include the email address associated with Your Account. Be aware that Your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

Children's and Minors' Privacy

The Service is for people who are 13 years old or older. We do not knowingly collect Personal Information from anyone under 13. If You are a parent or guardian and You believe Your child under 13 has given Us Personal Information, please contact Us. If We become aware that We have collected Personal Information from anyone under 13, We will take steps to delete that information as soon as reasonably possible.

Users under the age of majority where they live should use the Service, and make any Purchase, only with the permission of a parent or guardian. Some countries and states set a higher age at which an individual can consent to the processing of their own Personal Information. Where We rely on consent and the law applicable to a User sets an age higher than 13, We may require the consent of that User's parent or guardian before We collect and use their Personal Information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice in the Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact Us:

Other documents: Terms and Conditions · End-User License Agreement