Privacy Policy

Last updated: August 20th, 2026

Who We Are

XBOX Gear (the "Store," "we," "us," or "our") is operated by Cybernautix Systems LLC ("Dotexe"), located at 444 E Anaheim St, Long Beach, CA 90813, United States. XBOX Gear is powered by Shopify, which enables us to provide our services to you.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit, use, or make a purchase from our online store at gear.xbox.com (the "Services"), or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and disclose your information as described herein.

Scope and Recognition of Applicable Privacy Laws

Our Services are offered to customers around the world. We recognize and will comply with mandatory privacy and data protection laws in every jurisdiction where our Services are made available, including any national, state, provincial, or regional laws that apply to you based on where you are located or where you reside. Specific references in this Privacy Policy to the California Consumer Privacy Act as amended by the California Privacy Rights Act (CPRA), the EU and UK General Data Protection Regulation (GDPR), and the Swiss Federal Act on Data Protection are examples of laws we recognize and are not an exclusive list. Where the law of your jurisdiction provides you with rights, protections, or a standard of consent beyond what is described here, or requires additional disclosures, those rights and requirements will apply, and we will honor them to the extent required by law. If you have questions about how a specific privacy law applies to our handling of your personal information, please contact us using the details in Section 12.

1. Personal Information We Collect

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you as an individual. We may collect the following categories of personal information:

  • Contact details — your name, email address, phone number, billing address, and shipping address
  • Financial information — payment card details, transaction information, and payment confirmation (note: full card numbers are processed by our payment processor and are not stored by us)
  • Account information — your username, password, security questions, and account preferences
  • Transaction information — items you view, add to cart, purchase, return, or exchange, and your order history
  • Communications — messages you send us via email, contact forms, or customer support inquiries
  • Device and technical information — your IP address, browser type, device identifiers, operating system, and network connection
  • Usage information — how you navigate and interact with our Services, including pages visited, time spent, and clickstream data
  • Location information — general location inferred from your IP address or shipping address

Sensitive Personal Information: We do not collect or process sensitive personal information as defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), or special categories of personal data as defined in Article 9 GDPR. If our practices change, we will update this Privacy Policy and provide any notices required by applicable law before collecting such information.

2. How We Collect Personal Information

We collect personal information from the following sources:

  • Directly from you — when you create an account, place an order, contact us, submit a form, or otherwise interact with our Services
  • Automatically — through cookies, pixel tags, web beacons, and similar tracking technologies when you visit our website (see Section 7 — Cookies)
  • From Shopify — as our e-commerce platform provider, Shopify collects and processes certain data on our behalf to operate the Services
  • From third-party partners — such as payment processors, shipping carriers, analytics providers, and advertising networks
  • From social media platforms — if you interact with our content or advertisements on third-party platforms

3. Legal Basis for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, we are required under the General Data Protection Regulation (GDPR) and equivalent legislation to identify a legal basis for processing your personal information. We rely on the following legal bases:

Processing Purpose

Legal Basis

Processing orders and payments

Performance of a contract (Article 6(1)(b) GDPR)

Creating and managing your account

Performance of a contract (Article 6(1)(b) GDPR)

Customer support and communications

Performance of a contract (Article 6(1)(b) GDPR)

Fraud prevention and security

Legitimate interests (Article 6(1)(f) GDPR)

Marketing and promotional emails (with consent)

Consent (Article 6(1)(a) GDPR)

Analytics and service improvement

Legitimate interests (Article 6(1)(f) GDPR)

Compliance with legal obligations

Legal obligation (Article 6(1)(c) GDPR)

Non-essential cookies and tracking

Consent (Article 6(1)(a) GDPR)

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. The specific legitimate interests we pursue are: (a) detecting, preventing, and investigating fraud, security incidents, and unauthorized activity; (b) understanding how the Services are used, analyzing trends, and improving the functionality and user experience of the Services; and (c) ensuring the efficient administration and operation of our business. A copy of our legitimate interest assessment is available upon request using the contact details in Section 12. You may object to processing based on legitimate interests at any time (see Section 9 — Your Rights).

Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

4. How We Use Your Personal Information

We use your personal information for the following purposes:

  • Fulfilling orders — processing payments, arranging shipping, managing returns and exchanges, and sending order confirmations and updates
  • Account management — creating and maintaining your account, authenticating your identity, and managing your preferences
  • Customer support — responding to your inquiries, resolving disputes, and providing assistance
  • Marketing and promotions — sending promotional emails, showing relevant advertisements, and personalizing your shopping experience, where you have provided consent or where permitted by applicable law
  • Analytics and improvement — understanding how our Services are used, identifying trends, testing new features, and improving the overall shopping experience
  • Security and fraud prevention — detecting, investigating, and preventing fraudulent, illegal, or unauthorized activity and protecting the integrity of our Services
  • Legal compliance — complying with applicable laws and regulations, responding to lawful requests from authorities, and enforcing our Terms of Service

In particular, we use usage information (such as pages visited, time spent on the Services, and clickstream data) for analytics and service improvement, including understanding how the Services are used, identifying trends, testing new features, and improving the overall shopping experience. We use location information (general location inferred from your IP address or shipping address) to calculate applicable taxes and shipping costs, display content appropriate to your region (such as language and currency), detect and prevent fraud, and comply with legal obligations.

5. How We Share Your Personal Information

We do not sell your personal information to third parties for their own marketing purposes. We may share your personal information in the following circumstances:

  • With Shopify — as our e-commerce platform, Shopify processes personal information on our behalf to operate the Services. For more information, see Shopify's Privacy Policy
  • With payment processors — such as Shopify Payments and PayPal, to securely process transactions
  • With shipping and logistics providers — to fulfill and deliver your orders
  • With analytics and marketing providers — such as Google Analytics, to help us understand how our Services are used and to serve relevant advertising
  • With professional advisors — including lawyers, accountants, and auditors, where necessary
  • In a business transaction — in connection with a merger, acquisition, financing, or sale of business assets, your information may be transferred to a successor entity
  • To comply with legal obligations — in response to lawful requests from courts, law enforcement, or regulatory authorities
  • With your consent — for any other purpose you have expressly authorized

6. International Data Transfers

We are based in the United States. If you are located outside the United States, including in the EEA or UK, your personal information will be transferred to and processed in the United States and the following other countries: [insert each third country in which personal information is processed, e.g., Canada, India: ___]. These countries may not have the same data protection laws as your country.

Where we transfer personal data from the EEA or UK to countries not deemed adequate by the European Commission, we rely on appropriate safeguards including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • UK International Data Transfer Agreements (IDTAs) for transfers from the United Kingdom
  • Other recognized legal mechanisms under applicable data protection law

For more information about the safeguards we use for international transfers, or to obtain a copy of the relevant transfer mechanism, please contact us using the details in Section 12.

6A. Automated Decision-Making and Profiling

Our use of analytics, personalized advertising, and marketing tools may involve a limited degree of profiling, such as grouping users by interests or purchase behavior in order to personalize advertising, measure campaign performance, and improve the shopping experience. This profiling is limited in nature and consequence: it affects only the content and offers you may see and does not produce legal effects concerning you or similarly significantly affect you.

We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects concerning you, as contemplated by Article 22 GDPR. If we introduce any such automated decision-making, we will update this Privacy Policy to describe the logic involved and the significance and envisaged consequences of the processing, and we will inform you of your right not to be subject to such decisions. If you are located in the EEA, UK, or Switzerland, you may exercise the rights described in Section 9, including the right to object at any time to profiling for direct marketing purposes.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our Services, personalize your experience, and serve relevant advertising.

Types of cookies we use:

Cookie Type

Purpose

Consent Required

Strictly necessary

Essential for the website to function (e.g. shopping cart, login)

No

Functional

Remember your preferences and settings

Yes

Analytics

Understand how visitors use our site (e.g. Google Analytics)

Yes

Marketing

Serve personalized advertisements

Yes

When you first visit our store, you will be presented with a cookie consent banner. You may accept, reject, or customize your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our website.

Please note that disabling certain cookies may affect the functionality of our Services.

For more information about the specific cookies we use, please see our [Cookie Policy].

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, or reporting obligations.

Data Category

Retention Period

Account information

Duration of your account, plus 2 years after closure

Order and transaction records

7 years (tax and legal compliance)

Customer support communications

3 years from the date of resolution

Marketing preferences and consent records

Until you withdraw consent, plus 3 years

Analytics data

26 months (Google Analytics default)

Cookie consent records

3 years

When personal information is no longer required, we will securely delete or anonymize it in accordance with our internal data retention procedures.

9. Your Rights and Choices

Depending on where you live, you may have some or all of the rights described below. We will respond to verifiable requests in accordance with applicable law.

Rights for All Users

  • Right to Know / Access — You may request access to the personal information we hold about you
  • Right to Correct — You may request correction of inaccurate personal information
  • Right to Delete — You may request deletion of your personal information, subject to certain exceptions
  • Right to Portability — You may request a copy of your personal information in a structured, machine-readable format
  • Right to Opt Out of Marketing — You may unsubscribe from promotional emails at any time using the unsubscribe link included in each email

Additional Rights for EEA, UK, and Swiss Residents (GDPR)

In addition to the above, if you are located in the EEA, UK, or Switzerland, you have the following rights:

  • Right to Object — You may object to processing of your personal information based on our legitimate interests or for direct marketing purposes
  • Right to Restriction — You may request that we restrict the processing of your personal information in certain circumstances
  • Right to Withdraw Consent — Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing
  • Right to Lodge a Complaint — You have the right to lodge a complaint with your local data protection supervisory authority. For the EEA, you can find your relevant authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en. For the UK, the relevant authority is the Information Commissioner's Office (ICO) at https://ico.org.uk

California Residents (CCPA / CPRA)

If you are a California resident, you have the following additional rights:

  • Right to Know — You may request details about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared
  • Right to Delete — You may request deletion of your personal information, subject to certain exceptions
  • Right to Correct — You may request correction of inaccurate personal information
  • Right to Opt Out of Sale or Sharing — You may opt out of the "sale" or "sharing" of your personal information for targeted advertising purposes. You can exercise this right [here] or by enabling the Global Privacy Control (GPC) signal in your browser
  • Right to Limit Use of Sensitive Personal Information — Where applicable, you may request that we limit the use of your sensitive personal information
  • Right to Non-Discrimination — We will not discriminate against you for exercising any of your privacy rights

To submit a request, please contact us using the details in Section 12. We may need to verify your identity before processing your request. You may also designate an authorized agent to make requests on your behalf.

10. Children's Privacy

Our Services are not directed to children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected personal information from a child, please contact us immediately at contact@dotexe.com and we will take steps to delete such information.

As of the effective date of this Privacy Policy, we do not knowingly sell or share personal information of individuals under 16 years of age.

11. Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit (SSL/TLS), access controls, and secure data storage practices.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. If you believe your account has been compromised, please contact us immediately.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authorities and, where required, affected individuals in accordance with applicable law.

12. Contact Us and Data Controller Information

Data Controller: Cybernautix Systems LLC (operating as XBOX Gear / Dotexe) 444 E Anaheim St Long Beach, CA 90813 United States

Email: contact@dotexe.com Phone: (562) 247-1160

EU/EEA & UK GDPR Representatives (Article 27):

As a US-based company processing personal data of individuals in the EEA and UK, we have appointed Euverify Ltd as our EU and UK GDPR representatives in accordance with Article 27 GDPR. If you are located in the EU or UK and have questions or concerns regarding your personal data, you may contact our appointed representative directly:

EU Representative: Euverify Ltd (Ireland) Unit 3D North Point House North Point Business Park New Mallow Road, Cork, T23 AT2P Ireland Email: gdpr@euverify.com

UK Representative: Euverify Ltd (UK) 3rd Floor, 86-90 Paul Street London, EC2A 4NE United Kingdom Email: gdpr@euverify.com

To submit a Data Subject Access Request (DSAR), data deletion request, or any other GDPR-related inquiry, please use the secure portal: https://gdpr.euverify.com/verify/a3f35e83-bddb-4b3d-8cc7-3fbe2af22f78

Requests submitted through this portal are logged and tracked to ensure timely response and compliance. You may also contact us directly at contact@dotexe.com.

For privacy-specific inquiries, including requests to exercise your data subject rights, please email us at contact@dotexe.com with the subject line "Privacy Request" and we will respond within the timeframe required by applicable law (generally within 30 days, or 45 days for CCPA requests).

13. Relationship with Shopify

The Services are hosted by Shopify Inc., which collects and processes certain personal information about your access to and use of the Services. Information you submit may be transmitted to and shared with Shopify and third parties located in countries other than where you reside. To learn more, visit the Shopify Consumer Privacy Policy. You may also exercise rights related to data processed by Shopify via the Shopify Privacy Portal.

14. Third-Party Services and Links

Our Services may contain links to third-party websites or services. Some third parties process personal information on our behalf as service providers or data processors — for example, Shopify (our e-commerce platform), payment processors such as PayPal, and analytics providers such as Google Analytics. These data processors are contractually bound to handle your personal information only in accordance with our instructions and applicable data protection law, and their processing is described in this Privacy Policy. By contrast, independent third-party websites and services that we merely link to from the Services do not process personal information on our behalf and have their own privacy practices. We are not responsible for the privacy practices of those independent third parties and encourage you to review their privacy policies before providing any personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and provide notice as required by applicable law (such as by email or prominent notice on our website). We encourage you to review this Privacy Policy periodically.

Your continued use of our Services after the effective date of any changes constitutes your acknowledgment of the updated Privacy Policy.