Privacy Policy
1. Who we are
Hexa Client ("Hexaroid", "we"), located at México, is the data controller for personal data processed when you use Hexa Client, its online services and the hexaroid.com website (together, the "Service"). This policy follows Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and addresses rights granted by other laws such as the EU GDPR.
2. Data we collect
Minecraft account data
Your UUID, username and skin, taken from Mojang's public profile to verify that your account is legitimate.
Purchase data
Email address, purchase history and the items you own. Payments are processed by our payment provider acting as merchant of record. We never receive your full card details.
Client usage data
Equipped cosmetics and emotes and your synced settings. To show you other players' cosmetics, we receive the UUIDs of players near you; these are used in real time and not stored. We also record how long you are connected to Hexa services while you play (total time and number of sessions) and the last day (UTC) your game connected, to work out your streak of consecutive days and your best one. If your streak breaks, we keep its length and last day so it can be restored, along with your streak freezes and the date you last bought a restore.
On the website: if you sign in with your Microsoft account we only receive your Minecraft profile (UUID and name), never your password, and we do not keep Microsoft tokens. Your wishlist is private unless you choose to share it. If you send a gift, we keep who it is for and the signature and message you write, to show them to the recipient and to support.
Technical data
IP address, launcher, Hexa Client mod, game and Java versions, operating system, a hardware summary (RAM, CPU and GPU model), logs and crash reports. Hardware detection used to pick presets runs on your device.
Support and moderation records
Internal support notes and the history of changes our team makes to your account (cosmetics given or taken back, refunds, sign-outs and suspensions), with their date and reason.
What we don't collect
- Your Microsoft password: you sign in on Microsoft's own page.
- Your Minecraft access token: it is never sent to our servers.
- Sensitive personal data.
We do not sell your personal data or use it for targeted advertising.
3. Why we use it
Primary purposes (required for the Service)
- Providing, installing and updating the client.
- Verifying ownership of your Minecraft account.
- Delivering purchases and syncing cosmetics and emotes.
- Counting your daily streak and giving you the rewards it reaches.
- Security and fraud and abuse prevention.
- Enforcing the Terms, including suspending access to Hexa Client services.
- Support and compliance with legal and tax obligations.
Secondary purposes
- Sending product news by email.
- Aggregated analytics (versions in use and time played) to improve performance and decide which Minecraft versions to support.
You can opt out of secondary purposes at any time by writing to support@hexaroid.com, without affecting your use of the Service.
For users in the European Economic Area and the UK, our legal bases are performance of a contract (primary purposes), legitimate interests (security, analytics), consent (marketing email) and legal obligation (tax records).
4. Sharing
We share data only with:
- Service providers for hosting, CDN, error reporting and email, under confidentiality obligations.
- Our payment provider, to process purchases, taxes and refunds.
- Microsoft and Mojang, to authenticate your account.
- Competent authorities, when required by law.
Some providers may be located outside your country; in those cases we require protections equivalent to this policy.
5. Retention
- Account data: while your account is active.
- Purchase records: as long as tax laws require.
- Technical logs and crash reports: up to 90 days.
- Support and moderation records: while your account is active and up to 2 years after the last change.
6. Your rights
You can access, correct or delete your data, object to or restrict its processing, request a portable copy and withdraw consent. Send your request to support@hexaroid.com with your Minecraft username, the right you want to exercise and a way to contact you. We respond within 20 business days. You may also lodge a complaint with your local data protection authority.
7. Children
The Service is not directed at children under 13. Minors need permission from a parent or guardian to make purchases. If you believe a child gave us data without that permission, contact us and we will delete it.
8. Security
We apply reasonable technical and organizational measures, such as encryption in transit and restricted access, to protect your data.
9. Cookies and local storage
This website only stores your language preference in your browser. We do not use advertising or tracking cookies.
The launcher may show an ad on its Home screen (never while you play). Hexa's own ads are only counted anonymously (how often they were shown and clicked), without storing who you are or your IP address. If we ever use an ad network, it will run in an isolated frame and we will update this notice before switching it on.
10. Changes
We will post changes on this page and update the date above. For significant changes, we will notify you by email or in the client.