H HEXORIA Explore Tools
Legal

Privacy Policy

Last Updated: August 27, 2026

1. Introduction & Scope

This Privacy Policy applies to Hexoria (the "Service") available at hexoria.cc, provided by Hexoria ("We", "Us", or "Our"). It explains how We collect, use, and share information about you ("You") when You use Our Service, and the rights and choices You have with respect to that information.

By using the Service, You agree to the collection and use of information as described in this policy. If You do not agree with this policy, please do not use the Service.

How the Service works. Our communication tools are designed to run on your own device. The words, messages, sentences, and practice records you create in our tools are stored only on your device and are never uploaded to, or processed on, our servers.

2. Applicable Laws & Regulations

We are committed to protecting your personal information and to processing it in accordance with the data protection laws and regulations that apply to You and to Us. Depending on where You are located, one or more of the following regulations may apply to the processing of your personal information:

  • EU General Data Protection Regulation (GDPR) & UK GDPR. If You are located in the European Economic Area (EEA) or the United Kingdom, We process your personal information in accordance with the GDPR (Regulation (EU) 2016/679) and the UK GDPR, as applicable.
  • Brazilian General Data Protection Law (LGPD). If You are located in Brazil, We process your personal information in accordance with the LGPD (Lei Geral de Proteção de Dados, Law No. 13.709/2018), including the legal bases set out in Article 7 and the rights set out in Article 18 of the LGPD.
  • California Consumer Privacy Act (CCPA/CPRA). If You are a resident of California, USA, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) applies to the personal information We collect, and provides You with the rights described in Section 10 below.
  • Other applicable laws. Where other data protection laws apply to You (for example, the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, or the Personal Data Protection Act (PDPA) in Singapore), We will honor your rights under those laws to the extent they apply.

If there is any conflict between this policy and a law that applies to You, We will process your personal information in a manner that provides You with the greater protection.

3. Information We Collect

We collect information about You in the following ways:

Personal Information (voluntarily provided)

  • Contact details. We may collect information that can identify You, such as Your name, email address, or any other details You provide, when You voluntarily contact us (for example, by email or through the contact form) or when You subscribe to receive updates.
  • Account data (if applicable). If We introduce account features in the future, We may collect the information You provide during registration (such as a username and email address).

Usage Information (automatically collected)

  • Technical data. When You visit the Service, We may automatically collect information about Your interaction with it, such as Your IP address, browser type and version, device type, operating system, referring URLs, pages visited, and time spent on the Service.
  • Cookies and similar technologies. We use cookies and similar tracking technologies to help the Service function properly and to understand how the Service is used. Some of these are essential (required for the Service to work); others are analytics or advertising cookies.

What We do NOT collect

  • No tool content. We do not collect, store, or process the words, phrases, sentences, or practice data You create using our communication tools. This content remains on Your device.
  • No sensitive data. We do not knowingly collect special categories of personal data (such as health information) unless You choose to share it with us directly.

4. How We Use Your Information

We use the information We collect for the following purposes:

  • To provide, maintain, and improve the Service and its features.
  • To communicate with You, including responding to Your inquiries and sending service-related updates.
  • To personalize Your experience and deliver content that may be relevant to You (if applicable).
  • To analyze usage patterns and improve the quality, performance, and accessibility of the Service.
  • To ensure the security of the Service and prevent fraud, abuse, or technical issues.
  • To comply with legal obligations and enforce our Terms of Service.

5. Legal Bases for Processing

Where the GDPR, UK GDPR, or LGPD applies, We process personal information based on the following legal bases:

  • Your consent (Art. 6(1)(a) GDPR / Art. 7 LGPD). Where You have given clear consent to the processing of your personal information for a specific purpose, such as subscribing to updates or accepting non-essential cookies.
  • Performance of a contract (Art. 6(1)(b) GDPR / Art. 7 LGPD). Where processing is necessary to provide the Service You have requested.
  • Legitimate interests (Art. 6(1)(f) GDPR / Art. 7 LGPD). Where processing is necessary for our legitimate interests — such as improving the Service, ensuring security, and preventing fraud — provided those interests are not overridden by Your rights and interests.
  • Legal obligation (Art. 6(1)(c) GDPR / Art. 7 LGPD). Where processing is necessary to comply with a legal obligation to which We are subject.

Where We rely on consent, You may withdraw Your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. How We Share Your Information

We do not sell Your personal information. We may share Your information in the following circumstances:

  • Service providers. With trusted service providers who help Us operate the Service — for example, hosting providers, analytics providers (such as Google Analytics), and email communication services — who process information on Our behalf and under Our instructions.
  • Advertising partners. With advertising partners (such as Google) where You have opted in to personalized advertising, as further described in Section 11.
  • Legal requirements. If required by law, regulation, legal process, or governmental request, or where necessary to protect Our rights, safety, or property.
  • Business transfer. In connection with a merger, acquisition, reorganization, or sale of assets, in which case the information We hold may be transferred to the new owner.
  • With Your consent. In any other case, only with Your consent.

7. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected:

  • Contact/communication data. Retained for the duration of the correspondence and for a reasonable period afterward (up to 24 months) to respond to follow-up inquiries, unless a longer period is required by law.
  • Usage/analytics data. Aggregated or de-identified analytics data is retained for statistical purposes; raw analytics data is retained no longer than 26 months.
  • Data created in tools. Not collected or retained by Us at all — it stays on Your device.

When personal information is no longer needed, We will delete or anonymize it in a secure manner.

8. Data Security

We take reasonable and appropriate technical and organizational measures to protect Your information from unauthorized access, use, alteration, or disclosure, including encryption in transit (HTTPS), access controls, and secure storage practices.

However, please be aware that no method of transmission over the internet and no method of electronic storage is 100% secure. While We strive to protect Your personal information, We cannot guarantee its absolute security, and You transmit information to Us at Your own risk.

9. International Data Transfers

If You are located outside of the country where Our servers are based, the information We collect may be transferred to, and processed in, countries other than the one in which You reside, including the United States.

Where We transfer personal information from the EEA, the United Kingdom, or Brazil to a country that has not been recognized as providing an adequate level of protection, We rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement, as applicable, to ensure that Your information is protected to the standard required by applicable law.

10. Your Choices & Rights

Depending on where You are located, You may have the following rights regarding Your personal information:

  • Right of access. Request a copy of the personal information We hold about You.
  • Right to rectification. Request that We correct inaccurate or incomplete information.
  • Right to erasure ("right to be forgotten"). Request deletion of Your personal information (Art. 17 GDPR / Art. 18(VI) LGPD).
  • Right to restriction of processing. Request that We limit how We process Your information in certain circumstances.
  • Right to data portability. Request that We provide Your information in a structured, commonly used, machine-readable format (Art. 20 GDPR / Art. 18(V) LGPD).
  • Right to object. Object to processing based on legitimate interests or for direct marketing purposes (Art. 21 GDPR / Art. 18(II) LGPD).
  • California rights (CCPA/CPRA). If You are a California resident, You have the right to know what personal information We collect, the right to request deletion, the right to correct, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. We do not sell or share Your personal information.
  • Right to withdraw consent. Where processing is based on consent, You may withdraw it at any time.
  • Right to complain. You have the right to lodge a complaint with a supervisory authority — for example, Your local data protection authority in the EEA, the UK Information Commissioner's Office (ICO), or the Brazilian National Data Protection Authority (ANPD) — if You believe Your rights have been violated.

To exercise any of these rights, please contact Us at [email protected]. We will respond to verified requests within 30 days, or as otherwise required by applicable law. We may ask You to verify Your identity before processing the request.

Cookie preferences. You can control most cookies through Your browser settings, and analytics cookies through the choices described in Section 11.

11. Advertising & Opt-Out

The Service may display advertising provided by third-party advertising companies, such as Google. These companies may use cookies or similar technologies to serve advertisements based on Your prior visits to this and other websites (interest-based or personalized advertising).

You can also opt out of personalized advertising from many advertising networks through:

Please note that opting out of personalized advertising does not mean You will see fewer advertisements; it means the advertisements You see will be less relevant to Your interests. Essential cookies and non-personalized ads may still be used.

12. Children's Privacy

Our Service is not intended for children under the age of 13, and We do not knowingly collect personal information from children under 13 without verifiable parental consent. If You are a parent or guardian and believe Your child has provided Us with personal information, please contact Us at [email protected], and We will take steps to remove such information promptly.

13. Third-Party Links

Our Service may contain links to third-party websites or services that We do not own or control. We are not responsible for the privacy practices, content, or policies of any third-party websites or services. We encourage You to review the privacy policies of any third-party site You visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When We do, We will post the revised policy on this page and update the "Last Updated" date at the top. If We make material changes, We will take reasonable steps to notify You, such as by posting a notice on the Service.

Your continued use of the Service after any changes take effect constitutes Your acceptance of the revised policy. We encourage You to review this page periodically to stay informed about how We protect Your information.

15. Contact Us

If You have any questions or concerns about this Privacy Policy, or if You would like to exercise any of Your data protection rights, please contact Us at:

Hexoria
Email: [email protected]

We will respond to Your request within a reasonable time and, where applicable, within the time limits required by law (for example, 30 days under the LGPD and one month under the GDPR).