HEXA COMPLEX — Privacy Policy

Effective date: 16 July 2026
App: HEXA COMPLEX (“the Game”)
Publisher / data controller: Red Ribbon Games (“we”, “us”, “our”)
Contact for privacy questions:redribbongamesofficial@gmail.com

This policy explains what data the Game collects, why, who we share it with, and the choices and rights you have. It applies to the Game on Steam (Windows), Google Play (Android), and the Apple App Store (iOS). Where practices differ by platform, we say so.

1. Summary — what we collect

The Steam version is analytics-free and ad-free. It does not send product analytics, crash telemetry, or advertising data. It uses your account and cloud data only if you choose to sign in.

We do not sell your personal data. We do not collect your real name, physical location, contacts, photos, or payment card details (purchases are handled by the platform store — see §6).

2. Data we collect and why

2.1 Account data (optional)

Creating an account is optional; you can play the campaign and local features without one. If you create an account we collect, through Google Firebase Authentication:

• Email address — to identify your account, sign you in, verify your email, and let you reset your password.
• Display name — shown publicly as your author name on levels you publish and on the leaderboard.
• Password — set by you and managed by Firebase Authentication. We never see or store your plaintext password.
• Email-verification status.

Purpose: to provide accounts, cloud save/sync, community publishing, and leaderboards.
Legal basis (GDPR): performance of a contract (providing the account features you request).

2.2 Gameplay and cloud data (if signed in)

Stored in Google Firebase Realtime Database:

• Levels you create and publish — the puzzle layout, the level name you choose, and your display name as the creator label.
• Completion records — which levels you’ve finished.
• Scores and leaderboard stats — your total score, used for leaderboards.
• Likes — which community levels you’ve liked.
• Drafts — unfinished levels you’ve saved (private to you).

Purpose: to save and sync your progress and creations, power community browsing and leaderboards.
Legal basis: performance of a contract; our legitimate interest in operating community features.

2.3 Public community content

When you publish a level, the level name and your display name become visible to all players in the community browser. Do not include personal information in level names or your display name.

2.4 Product analytics — mobile only, with consent

On Android and iOS, if you opt in to analytics, we use Google Firebase Analytics to understand how the Game is played and improve it. We collect gameplay events such as: app open/background, level start / complete / fail / quit, tutorial progress, level-editor save/publish outcomes, and whether a sign-in or sign-up succeeded (the method, never your email, password, or name). Typical parameters are a level ID, level source (tutorial/campaign/community), mistakes, score, and duration.

Firebase Analytics also automatically collects standard technical data: device model, operating-system version, app version, language/region (approximate, derived from IP — we do not store your IP as gameplay data), and a pseudonymous app-instance identifier.

Purpose: to measure engagement and improve game design and stability.
Legal basis: your consent. The Steam build does not include analytics at all.

2.5 Crash diagnostics — mobile only, with consent

On mobile, under the same consent choice, we use Google Firebase Crashlytics to receive crash reports (stack traces and device state at the time of a crash) so we can fix bugs. Legal basis: consent.

2.6 Advertising — mobile free version only

The free mobile version shows ads. Our ad provider, Google AdMob, may access a device advertising identifier (Apple IDFA / Google Advertising ID) and device information to serve and measure ads. In the EEA/UK, we present Google’s User Messaging Platform (UMP) consent form before personalised advertising, and you can change or withdraw that choice at any time via Settings → Data → Manage ad consent. On iOS, we additionally request your permission through Apple’s App Tracking Transparency prompt before any tracking that uses the IDFA; if you decline, ads are not personalised using that identifier. You can buy the Remove Ads option (§6) to turn ads off. Legal basis: consent. The Steam version and any paid/premium mobile version have no ads.

2.7 On-device data

Game settings (audio, display, gameplay options) and local campaign progress are stored on your device (via the platform’s local preferences) and are not transmitted to us. Uninstalling the Game removes them.

3. Your consent choices (mobile)

On first launch on mobile, we ask whether you agree to analytics and crash reporting. We do not send any analytics or crash data before you consent, and events created before your choice are discarded. You can change your choice at any time in Settings. Turning consent off stops future analytics/crash collection.

4. Who we share data with

We share data only with the service providers needed to run the Game:

• Google / Firebase — Authentication, Realtime Database (cloud save & community), Analytics, and Crashlytics (mobile). Google processes this data as our provider. See Google’s privacy policy and the Firebase data-processing terms.
• Google AdMob (mobile free version only) — to serve and measure ads.
• The platform store (Apple App Store, Google Play, Steam) — handles app delivery and any purchases; the store, not us, processes your payment details.

We may disclose data if required by law, to enforce our Terms, or to protect the rights, safety, and security of players and the Game (for example, investigating abuse or a report of objectionable content). We do not sell your personal data, and we do not share it for cross-context behavioral advertising other than the ad-serving described above.

5. Community content & moderation

Published levels are visible to all players. We apply an automated language filter to level names and display names, and we provide a Report button on community levels. Reported content is reviewed and may be removed. To operate this, we store the report and the reporting account’s ID (visible only to that reporter and to us as the operator). See our Terms of Service for the content rules.

6. Purchases

Purchases (the premium game on Steam, and the Remove Ads in-app purchase on mobile) are processed by the relevant platform store. We receive confirmation that a purchase or entitlement occurred, but we do not receive or store your payment card or billing details — the store handles those under its own privacy policy.

7. Data retention

• Account and cloud data (levels, completions, scores, likes, drafts) are kept until you delete them or delete your account (§8).
• Analytics and crash data (mobile) are retained by Firebase according to our configured retention settings and Google’s policies.
• Published community levels may remain available to other players after you delete your account, but in anonymized form (your name removed) — see §8.

8. Your rights and how to exercise them

Depending on where you live (e.g. the EU/EEA/UK under GDPR, California under CCPA/CPRA), you have rights to access, correct, delete, and port your data, to withdraw consent, and to object to or restrict certain processing. You can:

• Delete your account — in Settings → Data → Delete account (requires re-entering your password), or on the web at redribbongames.com/delete-account (requires signing in). This deletes your account (email and display name), your likes, completion records, leaderboard stats, and drafts. The in-app flow also resets your on-device progress (the web flow cannot reach on-device data). Levels you published are anonymized (kept playable for other players, with your name removed) rather than deleted.
• Erase your cloud data without deleting your account — in Settings → Data → Reset community progress, or on the web at redribbongames.com/delete-account (requires signing in). This removes your cloud completion records, leaderboard stats, likes and drafts, and anonymizes the levels you published, while keeping your account.
• Withdraw analytics/crash consent (mobile) — in Settings at any time.
• Request access, correction, or a copy of your data, or raise any other privacy request — contact us at redribbongamesofficial@gmail.com. We will respond within the period required by applicable law.

You also have the right to lodge a complaint with your local data-protection authority (in the Netherlands, the Autoriteit Persoonsgegevens). We will not discriminate against you for exercising your privacy rights.

9. Children

The Game is not directed to children under 13 (or under the minimum digital-consent age in your country, e.g. 16 in parts of the EU). We do not knowingly collect personal data from children under that age. If you believe a child has provided us personal data, contact us at redribbongamesofficial@gmail.com and we will delete it.

10. Security

We protect data with industry-standard measures, including encrypted transport (TLS), Firebase security rules that restrict each player’s cloud data to their own account, and password re-authentication before account deletion. No method of transmission or storage is 100% secure, but we work to protect your data.

11. Where your data is processed & international transfers

Our Firebase Realtime Database — which holds your account’s gameplay and cloud data (levels, completions, scores, likes, drafts) — is hosted in Google’s europe-west1 region (Belgium, EU).

Other Google services we use — Firebase Authentication, Analytics, Crashlytics, and AdMob — run on Google’s global infrastructure and may store or process data outside the EEA, including in the United States, which may have different data-protection laws than your own. Where data is transferred outside the EEA, appropriate safeguards apply, including the European Commission’s Standard Contractual Clauses as incorporated into Google’s data-processing terms.

12. Changes to this policy

We may update this policy as the Game evolves. We will post the updated version with a new effective date and, where required, notify you in-app. Continued use after an update means you accept the revised policy.

13. Contact

Questions or privacy requests: redribbongamesofficial@gmail.com
Red Ribbon Games