Privacy Policy
This Privacy Policy explains what information Hexadu collects from you, why we collect it, who has access to it, and your rights regarding it. It applies to the Hexadu mobile app published by Elowin Labs LLC ("we", "our") on the Apple App Store.
The short version: We collect anonymous, aggregate gameplay data so we can understand how Hexadu is played and make it better. We do not collect your name, email, contacts, location, or anything else that could identify you. We do not sell data. We do not track you across other apps or websites. The app does not ask for any system permissions because it does not need any.
1. What we collect
When you use Hexadu, the following information is sent off your device:
Anonymous gameplay events. Each time you do something meaningful — start a game, finish a game, change a setting, complete onboarding — the app sends a small "event" to our analytics provider. These events contain only the event name and a small set of related values (e.g., your final score at game-over, how many pieces you placed, which mode you played). They contain no text you typed, no Apple-issued identifier, and no way to contact you.
A standard analytics envelope. Alongside each event, our analytics provider records a standard set of coarse, non-identifying device information: the Hexadu version you're running, your iOS version, your device class (e.g., "iPhone" / "iPad"), and your system locale. This information is the same kind of envelope every app's analytics SDK records.
An anonymous device identifier. To estimate how many people are using the app (versus the same person opening it many times), our analytics provider creates a one-way hash unique to your device and to Hexadu specifically. This identifier cannot be used to identify you personally, cannot be linked to your other apps, and is not shared with anyone outside our analytics provider. It is not Apple's Advertising Identifier (IDFA) — Hexadu does not request or use the IDFA.
Standard server logs. When the app launches, it fetches a small configuration file from our server. The server sees the same standard request information any web request includes: your IP address, the time of the request, and the User-Agent string sent by iOS. These logs exist for normal infrastructure operation and are kept by our hosting provider (Cloudflare) per their retention policy; we do not store them on our own systems.
2. What we do NOT collect
To be explicit, Hexadu does not collect:
- Your name, email, phone number, or any account information.
- Your location.
- Your contacts, photos, calendar, microphone, or camera data.
- Apple's Advertising Identifier (IDFA) or any cross-app tracking identifier.
- Anything you type.
The app does not request any system permissions because it does not need any.
Data stored only on your device. Your game progress, statistics, settings, theme choices, and language preference are saved to a private file inside the app's own storage on your device. This data never leaves your device, is not synced to any account or cloud service, and is not visible to us. It is removed automatically when you uninstall the app.
3. How we use what we collect
We use the anonymous gameplay data described above to:
- Understand how Hexadu is played — which modes, settings, and difficulty curves are most popular.
- Measure whether app updates improve or worsen the experience.
- Identify bugs, crashes, and performance issues before they affect more players.
Only the Hexadu team (Elowin Labs) has access to the analytics dashboards. The data is aggregated into charts and counts; we do not look at "individual sessions" because the data is not linked to individual people to begin with.
We do not use this information for advertising. We do not sell it. We do not share it with anyone outside the analytics provider described in the next section.
4. Third parties
TelemetryDeck. We use TelemetryDeck as our analytics provider. TelemetryDeck is designed specifically for privacy-clean, aggregate analytics: it does not collect personal data, does not build user profiles, and does not link data across apps. The anonymous events and device hash described in Section 1 are the only things sent to TelemetryDeck. TelemetryDeck's own privacy practices are described at telemetrydeck.com/privacy.
Cloudflare. We use Cloudflare Pages to host the small configuration file the app fetches at launch. Cloudflare sees the standard request information described in Section 1 as part of operating its content delivery network. Cloudflare's privacy practices are described at cloudflare.com/privacypolicy.
We do not use any advertising networks, social-media SDKs, or other third-party data collectors.
5. Data retention
The anonymous gameplay events sent to TelemetryDeck are retained according to TelemetryDeck's policy and are aggregated into dashboards that no longer represent individual sessions. Because the data is not linked to your identity, there is also no way to locate "your" data specifically — there is nothing identifying it.
6. Your rights
Even though we collect no personally identifying information, the following applies:
Stopping data collection. The current version of Hexadu does not include an in-app analytics opt-out. If you wish to stop the app sending anonymous gameplay events, delete the app. We are evaluating an in-app opt-out for a future version; if and when we add one, this policy will be updated.
EU / EEA residents (GDPR). GDPR grants you rights to access, correct, and erase personal data we hold about you. Because we collect no personally identifying information, there is no record of "you" specifically to access, correct, or delete. If you believe we hold information about you and want us to investigate, contact us at the address in Section 9.
California residents (CCPA / CPRA). We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not collect categories of personal information that would trigger the standard CCPA disclosure obligations. If you have a request under California law, contact us at the address in Section 9.
7. Children
Hexadu is suitable for general audiences and is not directed specifically at children under 13. The anonymous gameplay data described above contains no identifying information regardless of the player's age, so we are not knowingly collecting personally identifying information from any user, child or adult. If you are a parent or guardian and have questions about this policy, please contact us.
8. Changes to this policy
If we change what we collect or how we use it, we will update this page and the "Effective date" and "Last updated" lines at the top. Material changes will also be noted in the app's App Store release notes.
9. Contact
For any privacy-related question, contact us at: