Privacy Policy
App: Hex: Color Puzzle ("Hex")
Developer: The Yard Apps LLC, a Texas limited liability company, doing business as Oddyard ("The Yard Apps," "we," "us")
Contact: support@theyardapps.com
Effective Date: November 13, 2026
Overview
Hex is a color puzzle game. You can play it without an account, and your progress is saved on your device. We do not ask for your name, email address or phone number to play.
Some optional features need our servers: saving your progress to the cloud, signing in to play on more than one device, leaderboards, friends and sharing your Daily. This policy explains what those features send, when, and to whom. It also covers purchases, ads and analytics.
Data Stored on Your Device
Hex stores your game on your device (in the app's local storage). This includes:
- Journey progress: stars, levels cleared, world chests, bonus rounds, the Hive
- Hex Coins and boosters, win streaks, the daily gift calendar
- Scores, best runs and your top-10 initials
- Settings (sound, music, vibration, reduce motion, color assist, larger text, tile style)
- Achievements and play statistics (such as tiles fixed and time played)
This data stays on your device unless you use the online features below. Deleting the app removes it according to your operating system's normal uninstall behavior, and Settings → Reset all progress wipes it inside the app at any time.
Online Features
Online features are optional. When you use them, Hex talks to our servers, which run on Cloudflare (see Service Providers).
Your player account
The first time you use an online feature, the app creates an anonymous player ID and a session token so our servers can recognize your device. The token is stored on our servers only in hashed form. You do not need to give us your name or email.
If you choose to sign in with Google or Apple (to keep your progress across devices), the sign-in runs through Firebase Authentication (a Google service). We receive a stable account identifier and, if the provider shares it, your email address (Apple lets you hide your real email). We use them only to link your devices to the same player account and to recognize you when you sign in again. We never receive your password.
Cloud save
When online features are on, a copy of the game data listed above (except purchases and testing switches) is stored on our servers so it can be restored or used on another device. Your Hex Coins, boosters and stars are kept on our servers as the copy of record: the game reports what happened (a level won, a chest opened, a booster bought) and our servers check it and keep the balance.
Leaderboards
When you finish a Daily or Endless run, the app may send your score, the board you played, the list of swaps you made and when, and your initials or display name. We replay the swaps to check the score is genuine. Leaderboards show your display name and score to other players.
Friends
You get a friend code and can choose a display name. If you add friends (by code or an invite link), each of you can see the other's display name, Journey progress (stars and current level), best Endless score and today's Daily score. You can remove a friend at any time. If a new player joins through your invite link and finishes their first Daily, you both receive a booster; we keep a record of who invited whom for that.
What online features do not collect
Your contacts, location, photos, microphone or camera. We do not read or collect anything outside the game.
Sharing and Challenge Links
When you tap Challenge a friend, the app creates a link containing the board (a level number or an Endless board code), your score or number of swaps, and your initials. The link is only shared if you send it. Opening a challenge link does not send anything to us.
When you tap Share your Daily, the game draws a picture of your result (the date, your score, the number of boards and the day's colors) and sends it to our servers so the link you share shows a preview. The link and picture are public to anyone who has the link. They contain no name or account details, and they are deleted when you delete your account. Where you send the link (Facebook, WhatsApp, Messages and so on) is between you and that service.
Advertising
Hex is free and shows ads. Ads in the phone apps are provided by Google AdMob and ads on the website by Google AdSense:
- Ads between levels can be turned off with Remove ads or Hex Plus.
- Optional reward ads ("watch an ad for a booster") are only shown when you tap them.
- To show and measure ads, AdMob may collect your device's advertising identifier (IDFA on iPhone, Advertising ID on Android), IP address, device and app information, and ad interactions.
- On iPhone, we ask your permission (App Tracking Transparency) before your advertising identifier can be used for tracking. If you decline, you still get ads, but not personalized ones.
- In the EEA, UK and Switzerland, we ask for your consent through Google's consent message before personalized ads are shown.
- You can reset your advertising identifier or limit ad personalization in your device settings at any time.
- On the website, third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our sites and/or other sites on the Internet. You can opt out of personalized advertising in [Google's Ads Settings](https://www.google.com/settings/ads), and from many other vendors at [aboutads.info](https://www.aboutads.info/choices/).
- You can change your ad consent choice at any time: in the phone apps under Settings → Ad privacy choices (where the EU, UK or US-state rules apply), and on the website through Google's privacy message.
- How Google uses information from sites and apps that use its services: https://policies.google.com/technologies/partner-sites
See Google's privacy policy: https://policies.google.com/privacy
Measuring our own ads on TikTok
We advertise Hex on TikTok. To learn which of our TikTok ads lead people to install and open Hex, the phone apps include TikTok's App Events SDK:
- It tells TikTok when the app is installed, opened, and opened again on a later day, along with your device's advertising identifier (on Android; on iPhone only if you allowed tracking), IP address, and device and app information (model, system version, app version).
- It does not send your name, email, gamer tag, purchases, gameplay or anything you type.
- On iPhone, if you decline tracking, TikTok gets no advertising identifier; Apple's SKAdNetwork reports installs to TikTok without identifying you.
- In the EEA, UK and Switzerland it is not turned on.
- TikTok uses this to report on and improve our ad campaigns, under the [TikTok Business Products (Data) Terms](https://ads.tiktok.com/i18n/official/policy/business-products-terms) and [TikTok's privacy policy](https://www.tiktok.com/legal/page/us/privacy-policy/en).
- To stop it: on Android, delete or reset your advertising ID (Settings → Privacy → Ads); on iPhone, decline tracking for Hex (Settings → Privacy & Security → Tracking). You can also email us.
Analytics and Crash Reports
On the website we use Cloudflare Web Analytics to count visits and page loads. It uses no cookies and does not track you across sites.
In the game, gameplay events (for example level started, won or failed, boosters used, bonus rounds played) are recorded on your device only, for troubleshooting, and are not sent to us.
If we add app analytics or crash reporting later (for example Google Analytics for Firebase or Firebase Crashlytics in the phone apps), we will update this section first. Analytics and crash reports would not include your name, email or anything you type.
Purchases
Hex Coins packs, Hex Plus (a subscription) and Remove ads are optional. In the phone apps they are bought through the Apple App Store or Google Play; on the website, payments are processed by Stripe. We never see or store your card number. The store or Stripe tells our servers what you bought (a receipt or payment identifier, the product and the amount), and Stripe may share the email address you gave at checkout so we can find your purchase. To prevent fraud, purchase receipts are confirmed with Apple, Google or Stripe before the item is credited to your account.
Service Providers
- Apple (App Store) and Google (Google Play): distribution, purchases, subscriptions in the phone apps
- Stripe, Inc.: payments on the website (https://stripe.com/privacy)
- Google (Firebase Authentication): sign-in with Google or Apple; Google (AdMob, AdSense) when ads launch
- TikTok (TikTok for Business): measuring our own TikTok ads in the phone apps (see Advertising)
- Cloudflare, Inc.: hosts our website, the web version of Hex, and our game servers (player accounts, cloud save, leaderboards, friends, shared results), and provides the website analytics. Cloudflare may see technical request data such as IP address and time for security and abuse prevention, and we use it to limit abuse (rate limits).
All communication between the app and our servers uses HTTPS/TLS. Our servers are located in the United States and other countries where Cloudflare operates.
How Long We Keep Data
- On your device: until you reset progress or delete the app.
- Player account, cloud save, friends, scores, shared results: until you delete your account. A device's sign-in expires after a year without use, and we may delete accounts that have not been used for two years.
- Leaderboard entries stay visible while your account exists.
- Purchase records: as long as we need them for accounting and fraud prevention.
- Website analytics: aggregated counts only, kept by Cloudflare.
Your Choices and Rights
- Delete your account: Settings → Delete account deletes your player account, cloud save, friends, leaderboard entries and shared results from our servers. You can also email us; include your friend code so we can find the account.
- Reset progress: Settings → Reset all progress wipes the game on your device.
- Sign out: Settings → Sign out stops that device from using your account; the account keeps everything.
- Ads (when they launch): turn off personalized ads in your device settings or through the consent message; buy Remove ads or Hex Plus to stop ads between levels.
- Access, correction, deletion: Depending on where you live (for example the EU/UK under the GDPR, or California under the CCPA/CPRA), you may have the right to access, correct, delete or get a copy of your personal information, and to object to or restrict some processing. Email support@theyardapps.com and we will respond within the time the law requires. We do not sell your personal information. Sending app events to TikTok to measure our own ads (see Advertising) may count as "sharing" under some US state laws; you can opt out as described there or by emailing us. If personalized advertising launches, we will add a "Do Not Sell or Share My Personal Information" choice where the law requires one.
Children's Privacy
Hex is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Online features do not ask for a name, email or age; signing in with Google or Apple requires an account with that provider, which has its own age rules. If you believe a child under 13 has given us personal information, contact us and we will delete it.
Data Security
Your game on the device is protected by your device's own security (screen lock, encryption). Data sent to our servers travels over HTTPS/TLS, session tokens are stored hashed and expire when unused, and access to our servers is restricted.
Changes to This Policy
We may update this policy. If we make material changes, such as new kinds of data or new third parties, we will update the effective date and, where appropriate, tell you in the app.
Contact Us
Email: support@theyardapps.com
Developer: The Yard Apps LLC (Oddyard)
Effective Date: November 13, 2026