Hexit Privacy Policy

This policy explains how Digital Chocolate ("we", "us") handles information for the Hexit Android app for Solana Seeker, package com.hexit.seeker, and its game, leaderboard and notification services. It applies specifically to this Hexit app. Our studio website and other games have their own policies.

1. Information Hexit uses

• Guest and gameplay records. A randomly generated player identifier, an authenticated guest session, run identifiers, virtual balances, predictions, results, scores and timestamps allow the server to operate the game and check scores.
• Optional wallet and payment records. If you connect a wallet or submit a score, we process your public wallet address, wallet authentication proof, payment request, recipient, SOL amount, transaction signature, verification status and timestamps.
• Optional notification records. If you enable push notifications, we associate a random app device identifier and Firebase Cloud Messaging registration token with your guest session. Google also processes Firebase installation identifiers to deliver messages. We retain notification contents, delivery attempts and sending status for operation and troubleshooting.
• Connection and support information. Requests expose technical information, such as IP address, to our hosting and network providers. The game server uses IP addresses temporarily for rate limiting. If you contact us, we receive your email address and whatever information you include.

The app does not require a name, email address or phone number to play. No advertising or analytics SDK is enabled in Hexit.

2. Storage on your device

Hexit stores your guest session, player identifier, game and audio preferences, tutorial state, recent run information, cached public wallet address and pending payment receipt on your device. Notification settings and identifiers are also stored locally. These support gameplay, reconnecting and completing interrupted submissions; they are not advertising trackers.

Clearing app data or uninstalling can remove your access to previous guest runs. Hexit currently has no cross-device guest recovery. Clearing local storage does not erase server records or public blockchain transactions.

3. How we use information

We use this information to run and restore gameplay, calculate virtual scores, authenticate requests, verify leaderboard fees, publish rankings, prevent abuse, deliver notifications you enable and answer support or privacy requests. Gameplay and fee verification are automated; you can contact us about an incorrect result or rejected submission.

Where a legal basis is required, we process information necessary to provide the service you request, rely on our legitimate interests in security and fair rankings, and comply with applicable legal obligations. Optional push notifications depend on your choice to enable them, which you can withdraw.

4. Public leaderboard and blockchain data

Submitting a score makes your public wallet address, verified score and associated submission information available through the leaderboard service. Solana payments are public: the payer and recipient addresses, amount, transaction signature and transaction memo can be viewed by anyone. A public address may be linked to your other blockchain activity.

We can review requests about records we control, but cannot erase or change transactions already recorded on Solana or remove copies independently held by others.

5. Service providers and sharing

• Railway hosts the game service and PostgreSQL database that store guest, gameplay, leaderboard, payment-verification and notification records.
• Google Firebase Cloud Messaging processes notification identifiers and message payloads to deliver optional push messages. See Firebase's privacy information.
• Your wallet provider, Solana RPC providers and the Solana network process the wallet requests and transactions you authorize under their own terms and policies.
• Coinbase and Kraken supply public market prices to our server. Hexit does not send your guest identity or gameplay records to these exchanges.
• Website and email providers process requests when you open our public support or legal pages or email us. The Digital Chocolate website is hosted on Vercel.

We do not sell personal information or share it for targeted advertising. We may disclose information when required by law or reasonably necessary to protect users, investigate abuse or establish and defend legal rights.

6. Notification choices

Push notifications are optional. Enable them in Hexit's settings and grant Android notification permission to receive run-completion messages, score confirmations and Hexit announcements. Messages can appear on your lock screen according to your Android settings.

You can turn notifications off in Hexit or revoke permission in Android settings. Hexit's off switch attempts to unregister the device from our server and delete its messaging token; network errors may delay removal. Android permission controls whether notifications can be displayed. Disabling notifications does not delete gameplay or payment records.

7. Retention

Guest sessions expire after 90 days unless renewed by signing in again; expired session records are scheduled for cleanup after a further day. Notification jobs are scheduled for deletion after seven days. Device registrations are removed when successfully unregistered, when Firebase identifies them as invalid, or after 90 days without a registration refresh.

Gameplay, score and payment-verification records currently have no fixed automatic deletion period. We retain them as needed to operate the game and rankings, handle support and disputes, prevent fraud and meet legal obligations. You can request deletion as described below. Provider logs and backups may follow separate retention schedules, and public blockchain records remain on the network. Google's retention of Firebase installation identifiers is described in its linked privacy information.

8. Your choices and requests

You can play without connecting a wallet, decline paid score submission, disable notifications and clear local app data. Depending on applicable law, you may also have rights to access, correct, delete or obtain a copy of your personal information; restrict or object to processing; withdraw consent; and complain to your local data protection authority.

Send access or deletion requests to digitalchocolate@gmail.com with the subject "Hexit privacy request". Include the player identifier or public wallet address relevant to your request, if available. We may need to verify that you control the relevant account. Never send a private key, seed phrase or guest access token. Some records may need to be retained for security or legal reasons, which we will explain when applicable.

9. Security, location and age

Hexit uses HTTPS, authenticated service requests and hashed guest-session tokens in the database. No system can guarantee complete security. Our providers may process information outside your country; applicable transfer requirements and provider safeguards depend on the service and location.

Hexit is intended for users who have reached the age of majority where they live. If you believe a child has supplied personal information through Hexit, contact us so we can investigate and take appropriate action.

10. Changes and contact

We will update the effective date when this policy changes and provide additional notice of material changes where required. Digital Chocolate is responsible for the Hexit information described here. Contact digitalchocolate@gmail.com for privacy questions, or visit our support page.

Read the Hexit Terms of Use for gameplay and leaderboard payment rules.