Privacy Policy
Hexland is a game by Trailcode. This policy explains what data we collect when you play Hexland, why, where it is stored and what you can do with it. In short: we only collect what is needed to make the game work (saving, leaderboards, friends) and to improve it. We do not sell data, show ads or use third-party trackers.
Who is responsible?
Trailcode is the controller of your data.
TrailCode (sole proprietorship)
Segment 3, Box C9229, 6921 RC Duiven, the Netherlands
Chamber of Commerce (KvK) number 78368383
Email: support@hexlandgame.com
What data do we collect?
| Data | Why |
|---|---|
| Anonymous account ID. On first launch the game automatically creates a guest account with a random ID. You don't have to enter anything. The ID and sign-in tokens are also stored on your device. | To save your progress and recognise your game. |
| Email address (optional). Only if you choose to link an email address or sign in on another device. We send a one-time 6-digit code to that address. | To secure your account so you can restore your island on a new device. We don't use it for marketing or newsletters. |
| Display name and friend code. Your name defaults to “Eilander” and you can change it. You also get a friend code (like HEX-4K7Q). | To show you on leaderboards and to friends, and to add friends. Your name is visible to other players, so don't use your real name if you'd rather not. |
| Game save. The saved state of your island (tiles, buildings, stock, progress, game settings). | Cloud backup and restoring on another device. Only you can read your save; friends can view the game data of your island when they visit it. Your email address is never part of it. |
| Gameplay stats. Your level, experience points, number of tiles, coins earned and orders delivered. | For the leaderboards. Together with your display name these are visible to other players. |
| Gameplay events (analytics). Short notes about what happens in the game, such as “building built”, “level reached” or “shop opened”, with the time, your account ID, the app version and the platform (for example iOS). | To see which parts work, where players get stuck and to balance the game. This is stored on our own server, not via a third-party analytics service. |
| Friends and social features. Friend requests, friends list, blocked players, gifts (coins or resources), likes on islands, preset messages (like “Nice island!”) and when you were last active. | To make the friend features work. There is no free-text chat: you can only send preset messages. You can always remove or block someone. |
| Technical data. When your device connects to our server, the server may briefly keep your IP address and the request time in technical logs. | For security, debugging and abuse prevention. |
What we don't collect
- No real name, address, phone number, contacts, photos or location data.
- No advertising ID and no tracking across other apps or websites.
- No payment details. In-app purchases (such as diamonds, where available) are handled entirely by Apple. We don't receive bank or card details.
Why do we use this data?
- To make the game work: saving, restoring, leaderboards and friends.
- To improve the game and keep it fair (gameplay events, abuse protection).
- To help you if you need support.
We don't use your data for advertising, profiling or automated decisions, and we don't sell or share it with advertisers or data brokers.
Where is the data stored?
Your data is stored on a server operated by Trailcode (a self-hosted Supabase environment). It is not sent to any analytics or advertising service. The server is hosted by Contabo GmbH (Germany), with the server located in the United Kingdom (the UK has an EU adequacy decision). For storing encrypted backups we also use Cloudflare (R2 storage) as a processor.
A copy of your game save and a queue of gameplay events are also stored locally on your device. The app only connects to our own server; the email code is sent on our behalf through Google's email service (Gmail), which only processes your email address and the code for this.
How long do we keep data?
- While your account exists we keep your profile, game save, stats and friend data.
- When you delete your account we erase all of this from the server. Gameplay events linked to your account are deleted too.
- When you restart the game we erase your saved island, stats and related game data on the server; your account (and friend code) remains.
- Server and access logs, including IP addresses, are kept for at most 7 days and then deleted automatically.
- Database backups are made daily, stored encrypted off the server with Cloudflare (R2 storage) and automatically deleted after 7 days. Deleted data may therefore remain in a backup for up to 7 days.
Your rights and controls
- Delete your account in the app: Menu → Account → Delete account (“Account verwijderen” in Dutch). You type a confirmation word; your account and all its data are then removed from the server. An internet connection is required.
- Restart the game: Menu → Account → Restart game wipes your island and progress (also on the server) and lets you start over.
- Change your name, sign out, remove or block friends at any time in the app.
- Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection. Email us at support@hexlandgame.com; we reply within one month. Because a guest account is anonymous, we can only find your data if you give us your account ID or friend code.
- You can lodge a complaint with your national data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.
Children
Hexland is suitable for all ages. No account or email address is needed to play, and there is no free-text chat, no advertising and no social media integration. Players can only send each other preset messages and gifts, and choose their own display name, which is visible to other players. We recommend that young children use a made-up name and that parents help with adding friends and linking an email address. If you believe a child has given us data you want removed, please email us.
Sharing with others
We don't give your data to third parties for their own purposes. Other players only see your display name, level, number of tiles, leaderboard figures and (as a friend) your island. Service providers we need to run the game (hosting, email delivery) process data only on our behalf. We may disclose data when required by law.
Security
Connections to our server use HTTPS. The server is set up so that you can only read and write your own save, and friends can only see game data of each other's islands, never email addresses.
Clipboard
When you tap “copy code” or “invite” on the friends screen, the game places your friend code or an invitation text on the clipboard. The game never reads your clipboard.
Changes
If we change this policy we update the effective date at the top. For significant changes we will also tell you in the game.
Contact
Questions about privacy? Email support@hexlandgame.com.