# Privacy Policy

> What hexodic collects, why, and how to remove it. Written against the code that actually stores the data.

What data hexodic handles: you can play without an account; signing in stores your email and display name; anonymous game records train the AI and can be switched off. How to delete your account.

Canonical HTML: https://hexodic.com/privacy
Site index for agents: https://hexodic.com/llms.txt

**Effective date: 15 August 2026**

hexodic is a hex-board strategy game for iOS, Android, and the web, published by
**INTERPLORE LLC** (Michigan, USA). This policy explains what information we handle and the
choices you have.

**The short version.** You can play hexodic without an account. If you choose to **sign in**,
we store an account record that includes your **email address and display name** from the
provider you signed in with. Separately, and independently of any account, the game can
collect **anonymous records of completed games** to train its computer opponents — you can
turn that off. This website uses a privacy-focused analytics service, and the app shows
**randomized interstitial ads** on iOS and Android (Google AdMob — see §4), removable with a
one-time Premium purchase. We do not sell your personal information, and we do not use your
account details to target ads.

Questions: **interplore.media@gmail.com**

## 1. Playing without an account

The game runs on your device. **No account is required to play**, including against every
computer opponent. If you never sign in, we hold no name, email, or phone number for you.

## 2. If you sign in

Signing in is optional, and is needed only for features tied to an identity — online play
against another person, leaderboards, and anything you have purchased.

You can sign in with **Google**, **Apple**, or **Facebook**. When you do, that provider gives
us a limited set of profile details, and we store an account record containing:

| What we store | Where it comes from |
| --- | --- |
| A random player id | Generated by us |
| **Email address** | Your sign-in provider (may be absent, or an Apple private relay address) |
| **Display name** | Your sign-in provider |
| Which providers you have used, and a per-provider account identifier | Your sign-in provider |
| Whether the email has been verified, and when | Your sign-in provider |
| Profile image URL, where the provider supplies one | Your sign-in provider |
| Account creation time and last-seen time | Generated by us |
| Your rating, peak rating, and tier | Your play |
| What you have purchased, and what it entitles you to | Apple's App Store or Google Play |

**Apple's private relay.** If you use Sign in with Apple and choose to hide your email, Apple
gives us a relay address instead of your real one. We cannot see your real address.

**We never receive your password** from any provider, and we never ask you to create one with
us.

### Marketing attribution

If you arrive at hexodic from a link carrying campaign parameters (`utm_source`, `utm_medium`,
`utm_campaign`) or a **Facebook click identifier (`fbclid`)**, and you then create an account,
we store those values once on your account record with the time they were captured.

Plainly: `fbclid` is an identifier Facebook assigns when you click one of our ads there.
Storing it lets us tell that an account came from a particular campaign. We do not use it to
build a profile of you and we do not share it with anyone — but it does connect an ad click on
another platform to your account here, and you should know that.

Aside from the marketing attribution above, we do not build a profile of you across other apps
or websites, and the apps **do not load any third-party analytics SDK**. **Both the iOS and Android
apps include Google's AdMob advertising SDK** for the randomized interstitial ads in §4 — AdMob uses
an advertising identifier and, where you consent, may personalize ads using data Google holds; §4
explains your choices. This website's analytics are described next.

## 3. Website analytics

**This website** loads **Plausible Analytics** (`plausible.io`) on every page. Plausible is a
privacy-focused service: it sets **no cookies**, does not fingerprint your device, and does not
follow you between websites. It records aggregate page views, a small set of product events
(for example that someone started a demo game), and outbound-link clicks. Because the script is
served from `plausible.io`, your browser contacts that service when you visit.

This applies to the **website only** — the iOS and Android apps do not load it.

## 4. Advertising

The app shows **randomized interstitial ads**: full-screen ads shown at natural breaks between
games (for example, after a game ends). They are not tied to any in-game reward and are not
something you choose to watch. If you purchase the optional one-time **Premium** upgrade
($9.99), ads are removed entirely.

These ads are served by **Google AdMob**. To serve and measure them, AdMob collects your
device's **advertising identifier** and ad-interaction data, and may collect coarse
(IP-derived) location and device information. This applies on **both iOS and Android**.

**Your choices.** In the EEA and UK we ask for your consent first, through Google's consent
prompt; if you decline, the ads you see are **non-personalized**. You can reset or clear your
advertising identifier at any time in your device settings.

We do **not** use the account information in §2 (your name or email) to target ads, and we do
**not** sell or share that account information for advertising.

## 5. Anonymous game records (AI training)

Independently of any account, the game can create a record when a game finishes containing
**only** the moves played, the outcome, and a random game seed so the game can be replayed
deterministically. These records train hexodic's computer opponents, including global and
country-specific models.

**They are not linked to your account or identity.** They contain no name, email, account
identifier, or precise location.

**Your control.** Switch this off at any time in **Settings › Share anonymous game data**. When
it is off, no records are created and nothing is sent.

**Retention.** Because these records are anonymous and hold no link to you, we cannot locate or
delete an individual person's records on request. Switching the setting off stops all future
collection, and deleting the app removes on-device data.

## 6. Keeping you signed in

When you sign in we issue your device two tokens — a short-lived access token and a
longer-lived refresh token — and keep a server-side record of the refresh token so it can be
revoked. Signing out discards the tokens on your device.

We also use the **IP address** of a sign-up request, transiently, to limit how many accounts can
be created from one network. It is used for that check and is not stored on your account.

## 7. Payments

In-app purchases — 4 cosmetic board skins and a one-time Premium upgrade that removes ads — are
handled by the platform's own store — **Apple's App Store** or **Google Play**. Those stores
process the payment; **we never see your card or payment details.**

Optional website subscriptions are processed by **Stripe**. When you subscribe on the website,
we send Stripe your **email address** and receive back a **customer identifier** and
subscription status. Your payment-card details are entered directly with Stripe and are never
received or stored by us.

We record only **that a purchase was made and what it entitles you to** — listed in the table
in §2 — so your entitlements survive reinstalling the app or moving to a new device. We do not
use purchase records for analytics or advertising.

## 8. Deleting your account

You can delete your account from within the app.

- We immediately mark the account deleted and **erase the email address and phone number** held
  on it, so it cannot be matched or re-linked by a future sign-in.
- The record is then held for a **30-day grace period**, during which you can recover the
  account if you change your mind.
- After 30 days it is **permanently purged**.

Anonymous game records are unaffected, because they were never linked to your account (§5).

Step-by-step instructions are on the [delete your account](/delete-account) page, including
what to do if you can no longer sign in. To remove specific data **without** closing your
account, see [delete your data](/delete-data).

## 9. Where data is held

Account data is stored in **Microsoft Azure** (Cosmos DB, with a Redis cache for session state).
Data may be processed in the United States.

## 10. Who we share with

We do not sell your personal information, and we do not use your account details (name, email)
for advertising.

We share data only with the providers that make the service run: your chosen **sign-in provider**
(Google, Apple, or Facebook — the exchange that authenticates you), **Microsoft Azure** (hosting),
**Google AdMob** (the interstitial ads in §4 — where your advertising identifier is shared),
**Plausible Analytics** (website analytics, §3), the **App Store or Google Play** for in-app
purchases, and **Stripe** for website subscriptions (§7).

## 11. Children

hexodic is a general-audience strategy game and is **not directed to children under 13**. We do
not knowingly collect personal information from children under 13. If you believe a child has
given us personal information, contact **interplore.media@gmail.com** and we will delete it.

## 12. Your rights

Depending on where you live, you may have rights to access, correct, export, or erase your
personal data. The in-app deletion in §8 is available to everyone, on every platform. For
anything else, contact **interplore.media@gmail.com** and we will respond.

## 13. Changes

If we change this policy we will update the effective date above, and for material changes we
will give notice in the app.

## 14. Contact

**INTERPLORE LLC**, Michigan, USA — **interplore.media@gmail.com**

## Questions this page answers

- What data does hexodic collect?
- Does hexodic sell my data?
- How do I delete my hexodic account?