Privacy Notice
Last updated: 14 September 2026
1. Who is responsible for your data
EMPIRE is operated by Lacey Oldfield, who acts as the data controller for the personal data described in this notice. That means the seller determines how and why your personal data is processed.
2. What we collect and why
We collect the following categories of personal data:
- Anonymous player identifier — a random ID stored in your browser, used to link your premium subscription to your device and to keep your game progress.
- Gameplay and usage data — decisions, scenario progress, achievements, and product analytics events (e.g. when a paywall is shown or an upgrade is clicked), used to operate and improve the game.
- Support messages — if you contact us, the content of those messages, used to help you.
- Technical data — IP address, device and browser identifiers and similar telemetry, used for security, fraud prevention and product improvement.
- Traffic source data — referring page and campaign (UTM) parameters, used to understand how players find EMPIRE.
Payment details (card numbers, billing address, purchase tax data) are collected and processed directly by Stripe, our payment provider — we never see or store your full card details.
3. Legal bases
We process personal data on the following bases: performance of our contract with you (providing the game and your subscription), our legitimate interests (security, fraud prevention, analytics and product improvement), your consent where required (optional marketing or non-essential cookies), and compliance with legal obligations (tax and accounting records).
4. Who we share data with
- Stripe (payment provider) — for the sale of the product, subscription management, payments, tax compliance and invoicing.
- Service providers and subprocessors — hosting, database and analytics providers that process data on our behalf to operate the service.
- Professional advisers — legal and accounting advisers where necessary.
- Authorities — where we are required to disclose data by law.
5. International transfers
Some of our service providers (including Stripe and our hosting infrastructure) process data outside Australia. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.
6. Retention
We keep personal data only for as long as needed for the purposes above — generally while your player record is active, plus any period required for legal, tax or accounting obligations. Game progress stored locally in your browser stays there until you clear your browser storage. Data that is no longer needed is deleted or anonymised.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent at any time. Australian users may complain to the Office of the Australian Information Commissioner (OAIC); users in the UK/EEA may complain to their local supervisory authority. We respond to verified requests within one month. To exercise any right, contact us via the support link in your payment receipt.
8. Security
We apply appropriate technical and organisational measures, including encryption in transit, access controls and least-privilege access to production systems.
9. Cookies and local storage
EMPIRE uses essential browser storage to save your game progress, your anonymous player ID and your subscription status — these are required for the service to work. We use limited analytics storage (traffic source and campaign parameters) to understand how players find the game. We do not use advertising or cross-site marketing cookies. You can clear this storage at any time through your browser settings, which will reset your local progress.
10. Changes and contact
We may update this notice from time to time; the "last updated" date above shows the current version. Questions about privacy: contact the seller, Lacey Oldfield, via the support link in your payment receipt.