HEXTRAIL PRIVACY POLICYEffective date: April 22, 2026HexTrail is a real-world location game. We collect only what we need to make the game work. We do not sell your data. We do not share it with advertisers.───────────────────────────1. WHO WE AREHexTrail is operated by HexTrail, reachable at [email protected]. Our app lets players walk, run, or ride the Burke-Gilman Trail in Seattle to capture hexagonal territory tiles in a shared real-world game.───────────────────────────2. WHAT DATA WE COLLECTLocation data
HexTrail requires precise GPS location to function. We use your location to determine which hexagonal tiles you are physically present in, to validate captures, and to display your position on the trail map. Location is collected while the app is in use during an active session. We do not collect location data in the background when the app is closed.Anonymous player identity
When you first open HexTrail, we create an anonymous account for you. This gives you a unique player ID so your captured tiles are associated with you. No email, name, phone number, or personal information is required or collected.Gameplay data
We store the tiles you capture, when you captured them, and when their protection expires. This data is necessary for the game to function.Device token for push notifications
If you grant notification permission, we store your device's push notification token alongside your anonymous player ID. You can revoke notification permission at any time in your device settings.Session data
When you complete a session, we store aggregate session statistics — hexes captured, distance, duration, and mode. This powers your session summary and leaderboard ranking.───────────────────────────3. WHAT WE DO NOT COLLECT- Your name, email address, or phone number
- Payment information of any kind
- Contacts, photos, or any other device data
- Background location when the app is closed
- Advertising identifiers or tracking identifiers
- Social media profiles or linked accounts───────────────────────────4. HOW WE USE YOUR DATA- To operate the game — tile ownership, protection timers, leaderboard rankings, and session summaries
- To send gameplay notifications — tile takeover alerts and protection expiry reminders if you have granted permission
- To improve the app — aggregate, anonymized usage patterns help us understand how the trail is being used───────────────────────────5. DATA SHARINGWe do not sell your data. We do not share your data with advertisers. We share data only with these service providers:Supabase — our database and authentication provider. Stores anonymous player IDs, tile ownership records, and device tokens. supabase.com/privacyFirebase (Google) — used to deliver push notifications via Firebase Cloud Messaging. firebase.google.com/support/privacyMapbox — provides the map tiles and trail rendering in the app. mapbox.com/legal/privacy───────────────────────────6. DATA RETENTIONYour anonymous player account and tile ownership data is retained as long as your account is active. If you uninstall HexTrail, a new anonymous account is created on reinstall — your previous tiles and history are not recoverable. We may delete inactive anonymous accounts after 12 months of inactivity.───────────────────────────7. YOUR RIGHTS- Delete your data — email [email protected] and we will delete your account and all associated data within 30 days
- Revoke location permission — go to device Settings → HexTrail → Location → Never
- Revoke notification permission — go to device Settings → HexTrail → Notifications → turn off
- Access your data — email us and we will provide a copy of data associated with your anonymous player ID───────────────────────────8. CHILDREN'S PRIVACYHexTrail is not directed at children under 13. We do not knowingly collect personal information from children under 13. Contact [email protected] if you believe a child under 13 has used our app.───────────────────────────9. CALIFORNIA PRIVACY RIGHTS (CCPA)Because HexTrail uses anonymous authentication and does not collect personal identifiers such as names or email addresses, most CCPA provisions do not apply. We do not sell personal information. Contact [email protected] with any questions.───────────────────────────10. SECURITYWe use row-level security policies on our database to ensure players can only read and write their own data. We use HTTPS for all data in transit. If you believe there is a security issue, contact [email protected].───────────────────────────11. CHANGES TO THIS POLICYWe may update this Privacy Policy as the app evolves. We will update the effective date at the top when material changes are made.───────────────────────────Questions? Email [email protected] or visit hextrail.app