// privacy_policy
Privacy, specified.
We design games with simple rules and no hidden mechanics. This policy follows the same principle: every data flow is listed, every purpose is stated, every retention period has a number.
§01Scope & controller
This policy is issued by Hexmint Studio ("Hexmint", "we"), an independent games studio, which acts as the controller of personal data described here.
It applies to hexmintstudio.com and to our games: Tessellate (PC · Mobile), Six Sides of Siege (PC · Switch), and the in-development titles Cascade Protocol and Mintropolis.
It does not apply to third-party storefronts or platforms on which our games are sold; their own privacy policies govern data they collect.
§02Definitions
Personal data means information relating to an identified or identifiable person.
Pseudonymous identifier means a random ID (e.g. install_id) generated on your device that does not by itself reveal who you are.
Platform means the app store, console or PC storefront through which you obtain and run our games.
§03Data inventory
The complete list of personal data we process:
| Category | Fields | Source |
|---|---|---|
| Web server logs | IP address, user agent, requested URL, referrer, timestamp | Your browser |
| Correspondence | Email address, name (if given), message content | You |
| Daily puzzle results | Pseudonymous ID, puzzle date, completion time, move count | Tessellate |
| Diagnostics | Device model, OS version, game version, crash log | Our games |
| Aggregate store reports | Sales, downloads, country-level totals | Platforms |
§04Game-specific notes
Tessellate. To serve the shared daily puzzle and, where shown, global solve statistics (e.g. median solve time), the game sends your result for that day's puzzle tied to a pseudonymous ID. Streaks and level progress are stored locally on your device.
Six Sides of Siege. Campaign progress and settings are stored locally or via your platform's cloud save. Achievements are handled by your platform account.
Cascade Protocol & Mintropolis. Not yet released. If either introduces online features, this policy will be updated before launch (see §13).
Playtests. Every title is playtested extensively. If you join a playtest, we will provide a specific notice describing what is collected (typically email, platform, and feedback responses) before you participate.
§05Purposes & legal bases
| Purpose | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Operate & secure the website | Server logs | Legitimate interests |
| Respond to enquiries | Correspondence | Legitimate interests |
| Run daily puzzles & global stats | Puzzle results | Performance of a contract |
| Diagnose crashes & bugs | Diagnostics | Legitimate interests |
| Run playtests | Playtest data | Consent |
| Accounting & tax | Store reports | Legal obligation |
We do not use personal data for advertising, profiling, or automated decision-making with legal or similarly significant effects.
§06Cookies
hexmintstudio.com sets no analytics, advertising or tracking cookies.
If a strictly necessary cookie is ever introduced (for example, to remember a display preference), it will be documented here and will not be used to identify you.
§07Recipients
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
We disclose data only to processors acting on our instructions: hosting providers, an email provider, a crash-reporting provider, the backend service that runs daily puzzles, and survey tools for playtests.
We may disclose data where required by law, to enforce our terms, or to protect the rights and safety of players or others; or to a successor in the event of a merger or acquisition, subject to this policy.
§08International transfers
Processors may store data outside your country of residence. Transfers out of the EEA or UK are protected by an adequacy decision or by standard contractual clauses.
§09Retention schedule
| Category | Retention | Then |
|---|---|---|
| Web server logs | 30 days | Deleted |
| Daily puzzle results | 90 days | Aggregated into anonymous statistics |
| Diagnostics | 12 months | Deleted |
| Playtest data | Test duration + 6 months | Deleted |
| Correspondence | 24 months after last message | Deleted |
| Financial records | As required by law | Deleted |
§10Security
Data in transit is encrypted with TLS. Access to stored data is limited to team members who need it and protected by strong authentication. We review our processors' security practices before using them. If a personal data breach occurs that is likely to affect you, we will notify you and the relevant authority as required by law.
§11Children
Our games are suitable for a broad audience and collect no directly identifying data during play. Our website and playtests are not directed at children, and we do not knowingly collect personal data from children under 13 (or under 16 where local law sets that threshold). Parents or guardians who believe a child has provided us data may contact us for deletion.
§12Your rights
Subject to applicable law (including the GDPR, UK GDPR and the CCPA/CPRA), you may request access to, correction of, deletion of, or a portable copy of your personal data, and may object to or restrict processing. Where processing relies on consent, you may withdraw it at any time.
Because Tessellate results use a pseudonymous ID, include any player or install ID the game displays, or the device and approximate dates you played, so we can locate the records. Reinstalling the game generates a new ID, which disconnects future results from past ones.
We respond within 30 days, free of charge, and will never discriminate against you for exercising a right. You may also lodge a complaint with your local supervisory authority.
§13Changes
We version this policy. The effective date above reflects the latest revision. Material changes will be announced on our homepage at least 14 days before they take effect.
§14Contact
Send privacy requests and questions to [email protected] with "Privacy request" in the subject line.