1. Overview
House Duck ("we", "House Duck") respects the privacy of HEXAWORLD 1984 ("the game") players and follows applicable data protection law, including the GDPR. This policy explains what personal data we process, why, where it is stored, who it may be shared with, and how it can be deleted.
HEXAWORLD 1984 (Android package com.hexaworld1984.app, also available on the Apple App Store) is a single-player idle battle game. Core gameplay works offline; an internet connection is needed for cloud save, ranking, friends, mail and notifications.
2. Information We Collect
| Information | When and why it is processed | Stored in |
|---|---|---|
| Account identifier (anonymous UID) | Created automatically on first launch, to identify your save data | Supabase |
| Linked account details (email address, identity-provider ID) | Only if you choose to link a Google or Apple account, for sign-in and carrying progress to another device | Supabase |
| Game progress (stage, currency, save data) | Saved automatically while playing | Device + Supabase |
| Nickname, ranking score, stage | When you use ranking or friend features | Supabase |
| Friend code, friendships, gifts sent or received | When you use friend features | Supabase |
| Nickname and last-seen time (online indicator) | Refreshed when a friend list is opened | Supabase |
| Push notification token | Only if you enable notifications | Supabase, Google FCM / Apple APNs |
| Purchase data (product ID, transaction ID, platform) | When you buy a paid item | Supabase, Google Play / App Store |
| Advertising ID and device identifiers | Collected by the Google Mobile Ads SDK while ads are shown, for ad delivery and measurement | Google (AdMob) |
| App interactions and diagnostics related to ads | Collected by the Google Mobile Ads SDK for ad delivery, measurement and fraud prevention | Google (AdMob) |
We do not collect your precise or approximate location, contacts, photos, camera or microphone data — HEXAWORLD 1984 does not request device permission for any of these, and location is not one of the data types we collect. Separately, like any ad-serving technology, the Google Mobile Ads SDK processes standard technical request data such as your IP address to deliver ads to the right region and to help detect fraud, as described in Google's AdMob disclosures; this routine technical processing is not the same as us collecting your location, and we do not receive or store it. The game currently uses no separate analytics SDK; if that changes, we will update this policy first.
3. Why We Use It
- saving progress and carrying it between devices;
- providing ranking, friends and gift features;
- granting mail and rewards, and preventing abuse;
- confirming purchases and granting entitlements (for example ad removal);
- showing ads and managing consent;
- sending notifications only when you enabled them.
4. Who We Share Information With
House Duck does not sell your personal data to data brokers. Except where legally required, we do not provide personal data to other third parties. The following processors and services may handle information to provide the game.
| Processor | Role | Location |
|---|---|---|
| Supabase | accounts, database, hosting and cloud save | cloud region (Republic of Korea) |
| Google Sign-In | optional sign-in and account linking | Google systems |
| Google AdMob / UMP | ad delivery, measurement, fraud prevention and consent management | Google systems |
| Google Play Billing | in-app purchase processing on Android | Google systems |
| Sign in with Apple | optional sign-in and account linking on iOS | Apple systems |
| Apple App Store | in-app purchase processing on iOS | Apple systems |
| Google FCM / Apple APNs | push notification delivery (if enabled) | Google / Apple systems |
Information shared with Google for advertising through AdMob may include app interactions, diagnostics, and device/advertising identifiers, used to deliver and measure ads and to prevent fraud, consistent with Google's AdMob disclosures. We do not provide personal data to other third parties except where legally required.
5. Retention
- Account and game data: until you delete your account.
- Ranking records: aggregated per weekly season; past seasons are kept for at most 8 seasons.
- Friend gift records: deleted 90 days after sending.
- Push tokens: deleted immediately when you turn notifications off or delete your account.
- Purchase records: kept for the period required by law (for example 5 years for payment records).
6. Your Rights and Account Deletion
Subject to applicable law, you may request access, correction, deletion, restriction or portability, or object to processing, by contacting support@houseduck.in. We normally respond within 30 days.
- You can delete your account and its data at any time via Settings → Account → Delete account (hold for 2 seconds to confirm). This option appears once your account is linked to a Google or Apple account; if you are still playing as a guest, link an account first or use the email method on the Account Deletion page. Deletion is immediate and cannot be undone.
- You can turn notification consent off at any time in Settings.
- You can review your ad privacy choices in Settings → Privacy options.
- For any other access, correction or deletion request, contact us below.
See the full Account Deletion guide for what is deleted, what may be retained, and how to request deletion by email if you cannot open the app.
7. Advertising and Consent
- The game shows ads through Google AdMob.
- In regions covered by the GDPR, including the EEA, the UK and Switzerland, we collect consent through the Google User Messaging Platform (UMP) form.
- You can play without consenting to personalized ads; non-personalized ads may be shown instead.
- On iOS, Apple's App Tracking Transparency (ATT) prompt may be shown separately when cross-app tracking permission is requested.
8. Children
The game is not directed at children under 14 and we do not knowingly collect their personal data. If we learn that we have, we delete it immediately. A legal guardian may request deletion using the contact below.
9. Security
- Row level security is enabled on every database table; the client cannot write directly and all changes go through server functions.
- Traffic is encrypted with HTTPS.
- Access is granted on a least-privilege basis and server keys are never shipped in the app.
10. Contact
Privacy questions and requests: support@houseduck.in
11. Effective Date and Revisions
- 24 September 2026 — first version (v1, app version 0.5.0)