Privacy Policy
Last updated: October 1, 2026
1. Introduction
This Privacy Policy explains how Hex TCG ("the App", "we", "us", or "our") collects, uses, and protects your personal information when you use our mobile applications for iOS and Android. By using the App, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account using Apple Sign-In (iOS) or Google Sign-In (iOS and Android), we collect:
- Your email address (as provided by Apple or Google)
- A unique user identifier for authentication purposes
- The summoner name and avatar you choose for your profile (optional). They are visible to the users you add as friends.
We do not collect your phone number, address, or any other personal details.
2.2 Collection Data
When you use the App, we store the following data associated with your account:
- Cards and sealed products you add to your collection, and their quantities
- Custom collections, lists and your wishlist (name, icon, color, and cards included)
- Decks you build, match results and notes you log in the match tracker
- Price alerts, manual prices and your app preferences (such as currency and marketplace)
- Your friends list and friend requests
2.3 Camera Access
The App uses your device's camera solely for the card scanning feature. Camera images are processed locally on your device for card identification purposes. We do not store, transmit, or collect any camera images or photos.
2.4 Purchase Information
Subscription and in-app purchases are processed by Apple (App Store) on iOS and by Google (Google Play) on Android, and recorded by RevenueCat, our purchase management partner, to know which features your account has unlocked. We do not collect or store any payment information such as credit card numbers or billing addresses.
2.5 Usage Analytics and Device Identifiers
To understand how the App is used and improve it, we collect app usage events (for example, screens viewed and features used) linked to your user identifier, together with technical data such as device model, OS version, app version and an app-instance identifier. We also store a push notification token for your device so we can send the notifications you enable (such as price alerts).
- Firebase Analytics (Google) — iOS and Android.
- Mixpanel — iOS.
- Meta (Facebook) SDK — iOS only, to measure the results of our advertising campaigns. Your device's advertising identifier (IDFA) is only used if you allow tracking when the App asks (App Tracking Transparency). You can change this at any time in iOS Settings → Privacy & Security → Tracking.
The Android app does not use the advertising ID.
3. How We Use Your Information
We use your information exclusively to:
- Provide and maintain the App's core functionality
- Sync your collection data across devices via your authenticated account
- Process and manage your subscription status
- Send the notifications you enable, such as price alerts
- Understand how the App is used to improve its performance and user experience
- On iOS, and only with your permission, measure the effectiveness of our own advertising campaigns
We do not sell your data and we do not use it to show you advertising inside the App.
4. Data Storage and Security
Your data is stored securely using Firebase (Google Cloud Platform) with the following protections:
- All data in transit is encrypted using TLS/SSL
- Firebase Security Rules ensure that each user can only access their own data
- Firebase App Check verifies that requests originate from our legitimate App
- Authentication is handled by Firebase Auth with industry-standard security practices
Collection data is associated with your authenticated user account. Other users can only see your profile (summoner name and avatar) and the collections and decks you share with the users you have added as friends.
5. Third-Party Services
The App uses the following third-party services:
- Firebase (Google): Authentication, cloud data storage (Firestore), file storage (Cloud Storage), App Check security, push notifications (Cloud Messaging), remote configuration and analytics
- Apple App Store / Google Play: Payment processing for purchases made on each platform
- RevenueCat: Subscription and purchase management
- Mixpanel (iOS): Product analytics
- Meta (iOS, with your permission): Advertising campaign measurement
- TCGPlayer / Cardmarket: Card pricing data and marketplace links (no personal data is shared with these services)
Each third-party service operates under its own privacy policy. We encourage you to review them:
6. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We only share data with the service providers described in Section 5, which process it on our behalf to run the App, and on iOS with Meta for campaign measurement only if you allow tracking.
7. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, all associated data will be permanently removed from our servers. Purchase records kept by Apple, Google and RevenueCat, and analytics data held by our analytics providers, follow their own retention periods (see Delete your account).
8. Data Deletion
You can delete your account and all associated data at any time from the App (Profile → Delete account). Step-by-step instructions, including how to request deletion without the App, are on our account deletion page. You may also request account deletion by contacting us at hextcginfo@gmail.com.
Upon account deletion, all personal data including your profile, collection data, custom collections, lists, decks, match history, price alerts, friends and account information will be permanently and irreversibly removed from our servers. Deleting your account does not cancel an active subscription: cancel it in your App Store or Google Play account settings.
Android Launch Waitlist
If you leave your email on our Android page, we store it (with the language of the page and the date) in our Firebase database for the sole purpose of telling you when Hex TCG is available on Google Play. We do not use it for anything else or share it with third parties. We keep it until we have sent the launch announcement, or until you ask us to remove it by writing to hextcginfo@gmail.com.
9. Children's Privacy
The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will promptly delete such information.
10. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict the processing of your data
- Data portability
To exercise any of these rights, please contact us at hextcginfo@gmail.com.
11. Consent to Share Consumption Data with Apple (iOS)
By using Hex TCG and making in-app purchases, you consent to our sharing of data regarding your usage and consumption of purchased content with Apple, as part of our efforts to resolve refund requests. This information may include details about how you have accessed and interacted with the purchased content. The purpose of sharing this data is to help Apple make an informed decision regarding refund requests. We ensure that such data sharing is done in compliance with Apple's policies and only as necessary to process your requests.
12. Cookies and Analytics
The App does not show advertising. It uses the analytics and, on iOS with your permission, the campaign measurement described in Section 2.5. The website uses minimal analytics for performance purposes only. No advertising or third-party tracking cookies are used on the website.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any significant changes by updating the "Last updated" date at the top of this page and, where appropriate, through the App. Your continued use of the App after any changes indicates your acceptance of the updated policy.
14. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at hextcginfo@gmail.com.