Privacy Policy

This Privacy Policy explains what HexSum (“we”) collects when you use the Service, how we use it, and the choices you have.

What we collect

• Account info: username, email address, and a hashed (never plaintext) password.
• Gameplay data: puzzles you create or play, solutions, scores, accomplishments, and timestamps.
• Server logs: IP address and request metadata recorded by our hosting provider for security and reliability.
• Purchase records: if you buy HexSum Pro, Stripe processes the payment. We store a Stripe customer ID and a record of the purchase. We do not store your card number.
• Marketing preferences: your choices about receiving product update emails and general marketing emails.
• Cookies: short-lived auth cookies so you stay logged in. We do not use third-party advertising cookies.

How we use it

• To operate the Service and your account.
• To compute scores, accomplishments, and analytics for you.
• To process purchases and provide proof of purchase.
• To send transactional email (password resets, purchase receipts).
• To send marketing email, only if you have opted in. You can change your marketing preferences at any time in your account Settings.
• To keep the Service secure and prevent abuse.

Service providers we use

We use Amazon Web Services (hosting), Stripe (payments), and Amazon SES (transactional email). These providers process data on our behalf under their own terms and privacy notices.

Marketing email choices

At sign-up you choose whether to receive product update emails and/or general marketing emails. You can change both at any time on your account Settings page. We do not sell, rent, or share your email address with third parties for their own marketing.

Deleting your account

You can request deletion of your account from your account Settings page. Deletion requires an explicit typed confirmation. After you request deletion there is a 24-hour grace period during which you can cancel the request from Settings. Once the grace period ends, your account and associated personal data are permanently and irreversibly deleted. We retain payment records as required for tax and accounting.

Children

HexSum is directed to a general audience. We do not knowingly collect personal information from children under 13 years old, or older where applicable law provides different protections. If we become aware that a child under that age has provided personal information without a parent’s permission, we will delete it. We encourage parents to instruct their children never to give out their real names, addresses, phone numbers, or other personal information online without permission.

Changes

We may update this Privacy Policy from time to time. Continued use of the Service after changes are posted means you accept the updated policy.