Privacy Notice
Last updated: 12 August 2026
1. Who we are
Hexo is operated by Cristina Santamarina ("we", "us"), acting as data controller for personal data collected through this application.
2. Data we collect
- Account: name, email address and authentication identifiers (e.g. Google sign-in).
- Game data: rooms, Tables, matches, scores, chat/voice signalling metadata, custom names for sheep and cities.
- Support: messages you send us.
- Technical: device, browser, IP address and usage telemetry for security and reliability.
3. Purposes and legal bases
- Provide the service and your account — performance of a contract.
- Security, fraud prevention and abuse monitoring — legitimate interests.
- Comply with legal obligations, including tax and accounting — legal obligation.
- Improve the product — legitimate interests.
4. Sharing
We share personal data with:
- Service providers that host and operate the app (cloud hosting, database, authentication, storage). We do not use any third-party analytics vendor: usage metrics stay in our own database.
- Stripe Payments Europe, Ltd., our payment processor, for payments, subscription management, tax calculation and invoicing.
- Professional advisers (legal, accounting) and authorities where required by law.
5. International transfers
Where personal data is transferred outside the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.
6. Retention
We keep personal data for as long as needed to provide the service and to meet legal, tax and accounting obligations, after which it is deleted or anonymised.
7. Your rights
Subject to applicable law you may request access, rectification, erasure, restriction, portability, object to processing, or withdraw consent. You may also complain to your local supervisory authority. We aim to respond within one month.
8. Security
We apply appropriate technical and organisational measures, including encryption in transit, access controls and least-privilege database policies, to protect personal data.
9. Cookies and consent
We use strictly necessary cookies and local storage to keep you signed in and remember your preferences. First-party usage metrics are only recorded after you accept them in the cookie banner, and you can change or withdraw that choice at any time. We do not use advertising or cross-site tracking cookies.
10. Contact
Questions about this notice? Contact Cristina Santamarina through the in-app support channel. You may also lodge a complaint with the Spanish data protection authority (AEPD) or your local supervisory authority.