EmeraldX operates the website and service at https://emeraldx.io, a centralized custodial exchange for Habbo NFTs and supported digital assets on Immutable zkEVM. This Privacy Policy describes what information EmeraldX collects, why it is collected, how it is used and stored, and the choices you have. Last updated: 2026-06-28.
EmeraldX uses the information it collects to operate and provide the exchange — crediting deposits, settling trades, and processing withdrawals and internal transfers; to maintain on-chain reserves and fulfill the public reserves reporting; to detect, prevent, and respond to fraud, abuse, security incidents, and suspicious activity; to send service notifications via in-app and Discord channels; to comply with legal obligations and lawful law-enforcement requests where required; and to improve and monitor the service. EmeraldX does not sell personal data.
For users in jurisdictions whose privacy law requires a stated lawful basis for processing (such as the EU/EEA and the UK under the GDPR, and California under the CPRA), EmeraldX relies on the following lawful bases for the corresponding processing activities:
If you believe EmeraldX is processing your personal data on a basis that does not apply to you, you may object or request restriction of that processing, subject to applicable law.
To operate the custodial exchange, EmeraldX holds custody of deposited assets. The application database stores on-chain addresses only; private key material for the custody wallet is held in an isolated signer (MPC, KMS, or HSM) and never enters the application database. On-chain wallet addresses and transaction data are public.
The service uses essential session cookies — for your wallet sign-in session and the sign-in nonce — which are HttpOnly and scoped to the site. It also stores user preferences locally, such as theme and display preferences. EmeraldX does not use advertising cookies. You can control cookies through your browser; disabling essential cookies may affect sign-in.
Analytics is provided by Swetrix and can be self-hosted. It respects the Do-Not-Track setting. Other processors include the chain RPC provider(s) and the Immutable SDK (used for legacy collection data). EmeraldX does not sell personal data to third parties.
EmeraldX shares information only: (a) with the processors listed above as necessary to operate the service; (b) when required by law, court order, or lawful government request; (c) to protect the rights, property, or safety of EmeraldX, its users, or the public, including in cases of suspected fraud; and (d) in connection with a merger, acquisition, or asset sale affecting the service. On-chain data is inherently public.
Account and transaction data is retained while the account is active and as needed to maintain reserves, fulfill audit and legal obligations, and resolve disputes. Server and security logs are retained for a limited period. On-chain data is permanent and cannot be deleted by EmeraldX. You may request deletion of optional profile data, subject to legal and audit retention duties.
EmeraldX maintains a double-entry ledger as the source of truth for balances, performs reserve reconciliation (auto-pausing affected activity on a reserve deficit), uses timing-safe comparison for administrative authentication, applies security headers (including preventing the site from being embedded in other sites, blocking content-type sniffing, and restricting device permissions such as camera, microphone, and geolocation), and rate-limits sensitive endpoints. No security measure is perfect, and you share responsibility for securing your own wallet.
Because sign-in is wallet-based, you control access to your account by controlling your wallet.
The service is not directed to children under the applicable minimum age (for example, 13 in many jurisdictions). EmeraldX does not knowingly collect personal information from children. If you believe a child has provided data, contact EmeraldX to request deletion.
EmeraldX operates on Immutable zkEVM, and the service may be used from various jurisdictions. Information may be processed and stored outside your own country. You are responsible for compliance with your local laws.
EmeraldX may update this Privacy Policy; the “Last updated” date reflects the latest revision. Continued use of the service after changes constitutes acceptance of the revised policy.
Direct privacy inquiries to the EmeraldX team via in-app channels, the official Discord community, or X (@emeraldx_io). You can also review the help center for general questions about how the service works.