Privacy Policy
1. Who we are
Hexa Client ("Hexaroid", "we"), located at México, is the data controller for personal data processed when you use Hexa Client, its online services and the hexaroid.com website (together, the "Service"). This policy follows Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and addresses rights granted by other laws such as the EU GDPR.
2. Data we collect
Minecraft account data
Your UUID, username and skin, taken from Mojang's public profile to verify that your account is legitimate.
Purchase data
Email address, purchase history and the items you own. Payments are processed by our payment provider acting as merchant of record. We never receive your full card details.
Client usage data
Equipped cosmetics and emotes and your synced settings. To show you other players' cosmetics, we receive the UUIDs of players near you; these are used in real time and not stored. We also record how long you are connected to Hexa services while you play (total time and number of sessions) and the last day (UTC) your game connected, to work out your streak of consecutive days and your best one. If your streak breaks, we keep its length and last day so it can be restored, along with your streak freezes and the date you last bought a restore. For your yearly recap (Rewind) we add up, per year, how long you play on each server (or in your own worlds), with each Minecraft version, on each day and at each hour (in your computer's time zone), how often you play each emote, how long you wear each cosmetic, which friends you share a server with, how many sessions you play and the longest one. If you hide the server (streamer mode), its address is not stored.
Messages: we keep your private and group messages, with their reactions, so friends get them even when they are not playing and you can read the conversation later. Each person sees their conversation for their plan's days (currently 10 days without Hexa+ and 30 with Hexa+); in a group, the plan of whoever created it counts. After that they are deleted. Party messages are not kept. Only the people in the conversation can read them: there is no tool for the Hexa Client team to read them, and we use them for nothing else. If you block someone, the conversation between you is deleted.
On the website: if you sign in with your Microsoft account we only receive your Minecraft profile (UUID and name), never your password, and we do not keep Microsoft tokens. Your wishlist is private unless you choose to share it. If you send a gift, we keep who it is for and the signature and message you write, to show them to the recipient and to support.
Technical data
IP address, launcher, Hexa Client mod, game and Java versions, operating system, a hardware summary (RAM, CPU and GPU model), logs and crash reports. Hardware detection used to pick presets runs on your device. If the game closes because of an error and "Send crash reports" is on, the launcher sends us the versions, your system, the error and its first lines, without your computer's paths or your player name, along with your Minecraft UUID.
Public profile
Your page at hexaroid.com/u/<your name> shows what you wear, your cosmetic collection, your achievements, your streaks, whether you have Hexa+ and since when you play with Hexa Client. Never where or when you play. You can hide it from your account.
Support and moderation records
Internal support notes and the history of changes our team makes to your account (cosmetics given or taken back, refunds, sign-outs and suspensions), with their date and reason.
What we don't collect
- Your Microsoft password: you sign in on Microsoft's own page.
- Your Minecraft access token: it is never sent to our servers.
- Sensitive personal data.
We do not sell your personal data or use it for targeted advertising.
3. Why we use it
Primary purposes (required for the Service)
- Providing, installing and updating the client.
- Verifying ownership of your Minecraft account.
- Delivering purchases and syncing cosmetics and emotes.
- Counting your daily streak and giving you the rewards it reaches.
- Showing you your yearly recap (Rewind), and global statistics that do not identify you.
- Security and fraud and abuse prevention.
- Enforcing the Terms, including suspending access to Hexa Client services.
- Support and compliance with legal and tax obligations.
Secondary purposes
- Sending product news by email.
- Aggregated analytics (versions in use and time played) to improve performance and decide which Minecraft versions to support.
You can opt out of secondary purposes at any time by writing to support@hexaroid.com, without affecting your use of the Service.
For users in the European Economic Area and the UK, our legal bases are performance of a contract (primary purposes), legitimate interests (security, analytics), consent (marketing email) and legal obligation (tax records).
4. Sharing
We share data only with:
- Service providers for hosting, CDN, error reporting and email, under confidentiality obligations.
- Our payment provider, to process purchases, taxes and refunds.
- Microsoft and Mojang, to authenticate your account.
- Competent authorities, when required by law.
Some providers may be located outside your country; in those cases we require protections equivalent to this policy.
5. Retention
- Account data: while your account is active.
- Purchase records: as long as tax laws require.
- Technical logs and crash reports: up to 90 days.
- Private and group messages: the days of the reader's plan (for a group, its creator's); then they are deleted.
- Support and moderation records: while your account is active and up to 2 years after the last change.
6. Your rights
You can access, correct or delete your data, object to or restrict its processing, request a portable copy and withdraw consent. Send your request to support@hexaroid.com with your Minecraft username, the right you want to exercise and a way to contact you. We respond within 20 business days. You may also lodge a complaint with your local data protection authority.
7. Children
The Service is not directed at children under 13. Minors need permission from a parent or guardian to make purchases. If you believe a child gave us data without that permission, contact us and we will delete it.
8. Security
We apply reasonable technical and organizational measures, such as encryption in transit and restricted access, to protect your data.
9. Cookies and local storage
This website only stores your language preference in your browser. We do not use advertising or tracking cookies.
The launcher may show an ad on its Home screen (never while you play). Hexa's own ads are only counted anonymously (how often they were shown and clicked), without storing who you are or your IP address. If we ever use an ad network, it will run in an isolated frame and we will update this notice before switching it on.
10. Changes
We will post changes on this page and update the date above. For significant changes, we will notify you by email or in the client.