Privacy
Last updated: 11 August 2026
Hexis RPG is a personal training log. This page describes exactly what it stores, who can see it, and how to get rid of it.
What is collected
Your email address. Used only to sign you in. There are no passwords — signing in sends a one-time link to that address.
What you type into the app. Your stats, skills, quests, trainings, the logs you tap, any notes you attach to them, boss-fight results, the prizes you stock in the store, and your character's appearance.
A username, if you set one. Optional, and only needed to be findable by friends. It is visible to anyone who types it exactly.
Nothing else. There is no analytics, no advertising, no tracking pixels, no third-party scripts, no location, no contacts, no device identifiers, and no profiling. Nothing you do here is sold, shared for advertising, or used to train anything.
Cookies
One cookie, set by the authentication provider, which keeps you signed in. It is strictly necessary for the app to work and is not used to track you anywhere. There is nothing to consent to because there is nothing optional.
Who can see your data
You. Access rules are enforced in the database itself, per row, keyed to your account — not merely hidden in the interface.
Your party, partially. If you add friends, they can see your username, which class you are currently focusing, and milestone events you generate: levels reached, boss fights won, quests finished, streak milestones.
Failed boss fights, missed weeks and your notes are never shared with anyone. That is a deliberate design decision, not just a setting.
You can turn off event sharing, and you can remove a friend at any time.
Where it is stored
On Supabase (Postgres) and served through Vercel. Both may process data in the United States. Traffic is encrypted in transit.
How long it is kept
Until you delete it. Deleting a skill deletes its quests and logs. Deleting your account deletes everything.
Your rights
You can see, correct, export or delete anything at any point — most of it from inside the app, and all of it on request. If you are in the UK or EU, that includes your rights under UK GDPR and GDPR: access, rectification, erasure, restriction, portability and objection, and the right to complain to your local supervisory authority.
To delete your account and everything in it, email the address below.
Children
Not intended for anyone under 13, and no account should be created for one.
Changes
If this page changes materially, the date at the top changes and you will be told in the app before the change takes effect.