This Privacy Notice explains how CoastMedia ("we", "us", "our"), the operator of HexWander, collects, uses, and shares personal data. CoastMedia is the data controller for personal data processed through HexWander.
1. Data we collect
- Account data: email address, login credentials, display name.
- Campaign content: maps, hex data, notes, images, sounds, and other content you upload.
- Support communications: messages you send us.
- Usage / telemetry: device type, browser, IP address, pages viewed, feature usage.
- Billing data: collected and processed directly by our reseller Paddle; we receive limited transaction metadata (plan, status, country, last 4 digits of card).
2. Why we process it (purposes & legal bases)
- Providing the service (account creation, storing your campaigns, syncing across devices) — performance of contract.
- Security & fraud prevention — legitimate interests.
- Product improvement & analytics — legitimate interests.
- Customer support — performance of contract / legitimate interests.
- Legal compliance (tax, accounting, responding to lawful requests) — legal obligation.
3. Who we share data with
- Service providers / subprocessors — hosting, database, storage, analytics, and email providers acting on our instructions.
- Paddle.com — our Merchant of Record for all orders, which processes payments, subscription management, tax compliance, invoicing, and refund handling.
- Professional advisers — legal, accounting, or auditors when needed.
- Authorities — where required by law.
4. International transfers
Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
5. Retention
We keep personal data only as long as needed for the purposes above, or as required by law. Account and campaign data is kept while your account is active and deleted or anonymised within a reasonable period after account closure.
6. Your rights
Depending on your location, you may have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, to withdraw consent, and to lodge a complaint with a supervisory authority. We respond to verified requests within one month. To exercise your rights, contact us at the address in section 10.
7. Security
We apply appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege authentication — to protect personal data. No system is perfectly secure, but we work to keep risks reasonable.
8. Cookies
HexWander uses strictly necessary cookies and local storage to keep you signed in and to remember preferences. We may use limited analytics cookies to understand how the service is used. You can manage cookies through your browser settings.
9. Children
HexWander is not directed at children under 13 (or the age of digital consent in your country).
10. Contact
CoastMedia — privacy questions and data-rights requests: reach out through the support channel on the site or the contact details published on our website.