DRAFT, not published. Written 2026-09-28 from the DadGainz policy, adapted to Hex. Needs Mike's review (and ideally a lawyer's) before it goes live. Sections marked [when … launches] describe features that are built or planned but not live; keep, edit or remove them to match what ships. Placeholders look like [TBD: …].
Privacy Policy
App: Hex: Color Puzzle ("Hex")
Developer: The Yard Apps LLC, a Texas limited liability company ("The Yard Apps," "we," "us")
Contact: support@theyardapps.com
Effective Date: [TBD: date of publication]
Overview
Hex is a color puzzle game. You can play it without an account, and your progress is saved on your device. We do not ask for your name, email address or phone number to play.
Some optional features need our servers: saving your progress to the cloud, playing on more than one device, leaderboards and friends. This policy explains what those features send, when, and to whom. It also covers ads, analytics and purchases.
Data Stored on Your Device
Hex stores your game on your device (in the app's local storage). This includes:
- Journey progress: stars, levels cleared, world chests, bonus rounds, the Hive
- Hex Coins and boosters, win streaks, the daily gift calendar
- Scores, best runs and your top-10 initials
- Settings (sound, music, vibration, reduce motion, color assist, larger text, tile style)
- Achievements and play statistics (such as tiles fixed and time played)
This data stays on your device unless you use the online features below. Deleting the app removes it according to your operating system's normal uninstall behavior, and Settings → Reset all progress wipes it inside the app at any time.
Online Features [when online play launches]
Online features are optional. When you use them, Hex talks to our servers, which run on Cloudflare (see Service Providers).
Your player account
The first time you use an online feature, the app creates an anonymous player ID and a session token so our servers can recognize your device. The token is stored on our servers only in hashed form. You do not need to give us your name or email.
[when sign-in launches] If you choose to sign in with Apple or Google (to keep your progress across devices), we receive an account identifier from that provider, and possibly the email address they share with us (Apple lets you hide your real email). We use it only to link your devices to the same player account.
Cloud save
If cloud save is on, a copy of the game data listed above (except purchases, which come from the app stores, and testing switches) is stored on our servers so it can be restored or used on another device.
Leaderboards
When you finish a Daily or Endless run, the app may send your score, the board you played, the list of swaps you made and when, and your initials or display name. We replay the swaps to check the score is genuine. Leaderboards show your display name and score to other players.
Friends
You get a friend code and can choose a display name. If you add friends (by code or an invite link), each of you can see the other's display name, Journey progress (stars and current level), best Endless score and today's Daily score. You can remove a friend at any time.
What online features do not collect
Your contacts, location, photos, microphone or camera. We do not read or collect anything outside the game.
Challenge Links
When you tap Challenge a friend, the app creates a link containing the board (a level number or an Endless board code), your score or number of swaps, and your initials. The link is only shared if you send it. Opening a challenge link does not send anything to us.
Advertising [when ads launch]
Hex is free and shows ads, provided by Google AdMob.
- Ads between levels can be turned off with Remove ads or Hex Plus.
- Optional reward ads ("watch an ad for a booster") are only shown when you tap them.
- To show and measure ads, AdMob may collect your device's advertising identifier (IDFA on iPhone, Advertising ID on Android), IP address, device and app information, and ad interactions.
- On iPhone, we ask your permission (App Tracking Transparency) before your advertising identifier can be used for tracking. If you decline, you still get ads, but not personalized ones.
- In the EEA, UK and Switzerland, we ask for your consent through Google's consent message before personalized ads are shown.
- You can reset your advertising identifier or limit ad personalization in your device settings at any time.
See Google's privacy policy: https://policies.google.com/privacy
Analytics and Crash Reports [when analytics launch]
To find levels that are too hard and fix bugs, Hex records gameplay events: for example level started, won or failed, boosters used, ads shown, a purchase button tapped, and bonus rounds played. These go to Google Analytics for Firebase, with an app-instance identifier, device model, operating system, app version, country and language.
[when crash reporting launches] If the app crashes, Firebase Crashlytics receives a crash report: where in our code it happened, device model, OS and app version, and a random installation identifier.
Analytics and crash reports do not include your name, email or anything you type.
Purchases
Hex Coins packs, Hex Plus (a subscription) and Remove ads are bought through the Apple App Store or Google Play. We never see or store your card number or billing address. The store tells the app what you bought. [when purchase verification launches] To prevent fraud, the purchase receipt may be sent to our servers once to confirm it with Apple or Google.
Service Providers
- Apple (App Store) and Google (Google Play): distribution, purchases, subscriptions
- Google (AdMob, Firebase): ads, analytics, crash reports [when launched]
- Cloudflare, Inc.: hosts our website, the web version of Hex, and our game servers (player accounts, cloud save, leaderboards, friends). Cloudflare may see technical request data such as IP address and time for security and abuse prevention.
All communication between the app and our servers uses HTTPS/TLS. Our servers are located in the United States and other countries where Cloudflare operates.
How Long We Keep Data
- On your device: until you reset progress or delete the app.
- Player account, cloud save, friends, scores: until you delete your account. [TBD: e.g. accounts with no activity for 24 months are deleted.]
- Leaderboard entries stay visible while your account exists.
- Analytics and crash reports: per Google's retention settings ([TBD: e.g. 14 months]).
Your Choices and Rights
- Delete your account [when online play launches]: Settings → Delete account deletes your player account, cloud save, friends and leaderboard entries from our servers. You can also email us.
- Reset progress: Settings → Reset all progress wipes the game on your device.
- Ads: turn off personalized ads in your device settings or through the consent message; buy Remove ads or Hex Plus to stop ads between levels.
- Access, correction, deletion: Depending on where you live (for example the EU/UK under the GDPR, or California under the CCPA/CPRA), you may have the right to access, correct, delete or get a copy of your personal information, and to object to or restrict some processing. Email support@theyardapps.com and we will respond within the time the law requires. We do not sell your personal information. [TBD: confirm with counsel how AdMob personalized ads are treated as "sharing" under the CPRA, and whether a "Do Not Sell or Share" link is needed.]
Children's Privacy
Hex is not directed to children under 13, and we do not knowingly collect personal information from children under 13. [when online play launches] Online features ask for your age and are not available under 13. If you believe a child under 13 has given us personal information, contact us and we will delete it.
Data Security
Your game on the device is protected by your device's own security (screen lock, encryption). Data sent to our servers travels over HTTPS/TLS, session tokens are stored hashed, and access to our servers is restricted.
Changes to This Policy
We may update this policy. If we make material changes, such as new kinds of data or new third parties, we will update the effective date and, where appropriate, tell you in the app.
Contact Us
Email: support@theyardapps.com
Developer: The Yard Apps LLC
Effective Date: [TBD]