Privacy Policy.

Who we are

This Privacy Policy describes how Hex-a-gon Studio (“we,” “us,” or “Hex-a-gon”), based in Belgrade, Serbia, handles personal data collected through our website, landing pages, and games (including Cat Colony: Dreamworld and any other titles we publish). It applies across all of our products unless a specific product has its own published policy.

What we collect

To run and improve our games, we collect gameplay and device data — to understand how a game is played, balance it, fix bugs, and run live operations. Depending on how you interact with us, this may include:

• Contact information you send us voluntarily (for example, an email address when you write to hello@hexagongames.org).
• In-game activity: session start and end times, session length, the screens and levels you visit, in-game actions and progress events, currency and resource changes, item unlocks, errors, crashes, and similar gameplay events.
• Device and environment data: device model, operating system and version, language, locale, time zone, screen resolution, connection type, advertising identifier (IDFA / GAID) where permitted, and stable anonymous identifiers we generate to tie events to a single install.
• Approximate location derived from IP address (typically country and region).
• Acquisition data: how you found the game, which ad or campaign referred you, and basic attribution information from our ad partners.
• Website analytics: pages visited, approximate region, referring source, and similar standard web metrics where applicable.
• Purchase and subscription information processed by the relevant platform (Apple App Store, Google Play, Steam, or our payment partners). We do not store full payment card details on our servers.

How we use it

• To run, maintain, and improve our games and website.
• To balance gameplay, design content updates, and run live operations based on real player behaviour.
• To respond to your messages, support requests, and bug reports.
• To detect and prevent cheating, fraud, and abuse, and to protect our players and our services.
• To measure marketing performance, attribute installs, and show you ads inside our games and on third-party platforms.
• To send you product updates only when you have asked to receive them.
• To comply with legal obligations and enforce our terms.

Third parties we share data with

To operate our games and our data pipeline, we share data with a number of third-party providers. These partners process data under their own privacy policies, which we encourage you to read:

• GameAnalytics— gameplay analytics and player behaviour metrics.
• Google Firebase— analytics, crash reporting, remote configuration, A/B testing, and related backend services.
• Google Ads— advertising, install attribution, and remarketing.
• Unity Ads— in-game advertising and monetisation.
• Snowflake and Amazon Web Services (AWS)— secure cloud storage and processing of game and analytics data.
• Hosting, cloud, payment, and email providers we use to run the underlying infrastructure.

Some of these partners are based outside your country, including in the United States. Where required, we rely on standard contractual clauses and equivalent safeguards to protect your data during international transfer.

Sharing and “sale” of data

We don’t sell your personal data for money. However, some of our advertising and analytics partners (in particular Google Ads, Unity Ads, and similar networks) receive device identifiers and behavioural data in a way that some laws, including the California Consumer Privacy Act, define as a “sale” or “sharing” of personal information. If you live in a jurisdiction that gives you the right to opt out of this kind of sharing, contact us and we’ll honour it.

How long we keep it

We retain telemetry, analytics, and gameplay event data for as long as it is useful for running, balancing, and improving our games, or as required by law. Account-linked progression data is kept while your account is active and for a reasonable period after, in case you return. Aggregated or anonymised data that can no longer be tied to you may be kept indefinitely.

Children

Our products are designed for general audiences. We do not knowingly collect personal data from children below the age required by local law without appropriate parental consent. If you believe a child has provided us with personal data, please contact us and we will remove it.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Withdraw consent for any processing based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, write to us at the address below. We will respond within a reasonable timeframe.

Where we store data

Game and website data is stored with managed cloud providers, primarily Snowflake and Amazon Web Services (AWS). These services are operated under their own security and privacy certifications, and they host data in regions outside Serbia, including the European Union and the United States. Access to this stored data is restricted to authorised members of the Hex-a-gon team and the service providers needed to operate it.

Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, and misuse. No system is perfectly secure, but we take this seriously and review our practices regularly.

Changes to this policy

We may update this policy as our products evolve. When we do, we will revise the “Last updated” date at the top of this page. Significant changes will be highlighted on our website.

Contact

Questions about this policy or your data?
hello@hexagongames.org
Hex-a-gon Studio, Belgrade, Serbia.