HEXROLLIn short: the game stores the results of your games and the game you are in the middle of, to back them up and bring them to your other devices. Your daily challenge result appears in a leaderboard under a name you choose. If you sign in, it also stores your email. We show no ads, do not track you, use no analytics and sell no data.
Who is the controller
HEXROLL is run by Viktor Novák, Slovak Republic. Send questions about your data and requests under the GDPR to sukromie@hexroll.online.
What data we process
| Data | What it is for |
|---|---|
| Game results | Win or loss, place, number of players, AI level, map size, rounds, attacks, highest roll, largest region and when the game ended. The game works out your stats and records from them. |
| Daily challenges | The challenge’s day, whether you completed it, your moves and the result (place, rounds and attacks). The server replays the challenge from your moves to verify the result for the leaderboard. |
| Leaderboard name | Only if you set one: the nickname other players see in the daily challenge leaderboard. Without one, you appear as “Hráč” (Player) with four random characters. |
| Game in progress | The state of an unfinished game, so you can continue it on another device. |
| AI speed and language | The AI speed, so it is the same on all your devices. The game’s language, if you have an account: so the email with your code comes in your language. |
| Random identifiers | A player and a device identifier. They are not derived from your device or from you; they only link results together. |
| Email address | Only if you create an account: to sign in with a one-time code. |
| Technical data | IP address, type of browser or app and time of connection. The server logs them when you sign in and sync, for security and fixing errors. |
| Bot protection | When the game creates a new player or sends a sign-in code, Cloudflare Turnstile checks that you are a human. It processes your IP address and technical data about your browser and device. There is nothing for you to do; the check runs in the background. |
Other settings (sound, vibration, map buttons) stay on your device only.
Playing without and with an account
Without an account, your results and the game in progress are backed up to the server under a random anonymous identifier. If the game does not connect to the server for 90 days, this data is deleted automatically, including your leaderboard results. On your device it stays until you uninstall the game.
With an account, your results and the game in progress are backed up to the account and brought to every device where you sign in. When you sign out, they are removed from that device and stay in the account.
Why we process data
We process data to give you what the game offers: backing up your results and the game in progress, bringing them to your other devices, daily challenge leaderboards and signing in to your account. The legal basis is performance of a contract (Art. 6(1)(b) GDPR). We process technical data and the bot check on the basis of our legitimate interest in running the game securely and reliably and in preventing abuse (Art. 6(1)(f) GDPR).
We do not use your data for advertising, profiling or automated decision-making.
Who gets access to the data
Other players see only your leaderboard name (or “Hráč” with four characters) and your challenge result in the daily challenge leaderboard. They do not see your email or any other data.
Otherwise we do not sell or share your data with anyone. We use these processors to run the game:
- Supabase – database and sign-in. The data is stored on servers in the European Union.
- Resend – sending the email with your sign-in code. It only gets your email address and the code.
- Cloudflare – running the website www.hexroll.online, including the web version of the game, and bot protection (Turnstile).
These companies are based in the USA. Where data is transferred outside the European Economic Area, this is done on the basis of standard contractual clauses approved by the European Commission or the EU–US Data Privacy Framework.
How long we keep data
- An account, its results, game in progress and leaderboard name – until you delete the account. The game in progress is replaced when you finish it or start a new one.
- An anonymous player’s data – up to 90 days after the last connection.
- Server technical logs – briefly, as set by the providers, usually a few days.
Your rights
You have the right to access your data, have it corrected or erased, restrict its processing, data portability and the right to object.
- Delete your account right in the game: Settings → Account → Delete account. The account and all its results, including leaderboards, are deleted immediately.
- Send any other request to sukromie@hexroll.online. We will reply within one month.
- If you believe we handle your data unlawfully, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.
Children
Accounts are for people aged 16 and over. Younger players can play without an account or create one with a parent’s consent.
Changes to this policy
If we change this policy, we will publish the updated version on this page and in the game with a new effective date.