Privacy Policy
Last updated: 8 November 2026
Hexland is an online game made by HEXAGO (hxago.com). This page says what we keep about you, why, and how to have it deleted. Questions: business@hxago.com.
What we keep
- Your account: the name you pick and your password. The password is never stored as written: only a salted, one-way hash of it (PBKDF2, SHA-256), which cannot be turned back into the password.
- Your birth year: asked once, to set what is safe for your age: players under 13 start with chat off, and only a parent or guardian should turn it on.
- Your game: your backpack, gems, clothes, playtime, friends list and the worlds you visited last.
- What you build: blocks, trees, signs and locks you place in worlds, and the names on your locks' lists. Worlds are shared, so other players see them.
- Sign-ins: a sign-in key for each device you use, stored only as a hash. A key not used for 30 days ends by itself.
What we don't keep
- Chat: messages go live to the players in the same world (private messages to the one player) and are not stored.
- No email, real name, phone number, location or payment details are asked for.
- No cookies, ads, analytics or tracking. Your browser keeps your sign-in key and settings (sound, graphics, button places) in its own storage on your device; you can clear them by logging out or clearing the site's data.
Your connection
The game runs on Cloudflare. To deliver it, Cloudflare handles your IP address and connection details. We don't store them. Cloudflare's servers are around the world, including outside Turkey, so your data may be handled in other countries: see Cloudflare's privacy policy.
Why
To run your account and the game (the reason you sign up), and to keep it fair and safe: the server checks moves and actions so nobody can cheat or take other players' things. We don't sell your data or share it with anyone else, unless the law requires it.
How long
As long as your account exists. When you delete it, your account and everything kept with it (backpack, gems, clothes, friends, sign-ins) is deleted at once, and your locks are removed from every world, so their land is open again. Blocks and signs you placed stay in the worlds they are in, as part of those worlds, with nothing tying them to you.
Deleting your account
- In the game: Menu → Settings → Account → Delete account.
- On the web, without the game: hexland.hxago.com/delete-account.
Either way you confirm with your password. It cannot be undone.
Your rights
You can ask what we keep about you, have it corrected or deleted, and object to how it is used: write to business@hxago.com. Players in Turkey: see also our KVKK Aydınlatma Metni; you can also complain to the Personal Data Protection Authority (KVKK).
Children
Hexland asks for no email or real name. Please don't use your real name as your player name. Children under 13 should play with a parent's permission. For them, chat starts off: they neither see nor send messages until it is turned on in Settings → Account, which asks for a parent's or guardian's OK.
Changes
If this policy changes, this page and its date change with it.