Hexplore is run by Adam Bushman, LLC, doing business as Hexplore ("Hexplore", "we", "us"). This policy explains what we collect, why, who helps us run Hexplore, and how deleting works.
The short version: we collect what Hexplore needs to work, we don't sell your data or show you ads, and when you delete something for good, it's gone.
What we collect
Your account. Your name, email address and password. We store passwords only in a scrambled form we can't read back. If you turn on two-factor authentication, we store its secret too.
What you add. Your photos, maps, trips, places and captions. When you upload a photo, we read the details stored in the file: when and where it was taken, and the camera's details. We use them to suggest a photo's date, place and trip.
We don't keep the original file you upload. We keep a display copy, up to 2,560 pixels on its longest side, and a small thumbnail.
Searching for places. What you type to find a place is sent to our place search provider to find matches.
Sign-in sessions. While you're signed in, we keep your session, with the IP address and browser it came from, to keep you signed in and your account secure.
Payments. Payments are handled by Paddle, our merchant of record. Paddle collects your payment details, and we never see your card number. We keep a record of what you bought, how much it was and when.
Messages to us. When you contact us, we receive your name, email address and message.
How we use it
- To provide Hexplore: storing your photos and maps, drawing your maps and exports, and showing shared maps to the people you share them with.
- To keep your account secure and Hexplore running.
- To email you about your account, such as verifying your address or resetting your password, and about important changes.
- To answer you when you contact us.
- To understand how Hexplore is doing as a business, using records that can't be linked back to you (see below).
We don't sell your data, share it for advertising, or use your photos to train AI models.
Shared maps
When you share a map with a link, anyone with the link can see the map, its title and the photos on it, as thumbnails rather than full size. Nothing about you is shown. Shared maps aren't indexed by search engines.
Turning a link off stops the page. A photo's thumbnail address that someone has already copied keeps working until you delete that photo for good.
Gifts
When you send a gift, we keep the recipient's email address, and your note if you add one, only until they accept it or you cancel it. If you choose to, we email them once to say it's waiting. Once a gift is accepted, we delete its record, so we don't keep a record of who gave what to whom.
If you delete your account while gifts are waiting, you can choose to keep them for their recipients. Then we keep only what they need: each gift's map, the photos on it, your name and your note, until it's accepted. Everything else is deleted as usual.
When someone accepts a map you gave them, the map and the photos on it go to their account: copies of the photos, or the photos themselves if you chose to move them. Each photo's place, date and caption go with it.
Who helps us run Hexplore
We use these services to run Hexplore. Each one handles your data only to do its job for us.
| Service | What it does |
|---|---|
| Laravel Cloud | Hosts the app and its database |
| Amazon Web Services (S3 and CloudFront) | Stores your photos and delivers them, in the United States |
| Amazon Location Service | Searches for places |
| Resend | Sends our emails, and receives what you send to [email protected] |
| Paddle | Takes payments, as our merchant of record |
| Bunny Fonts | Serves the fonts the app uses; your browser contacts it to load them |
| Unsplash | Serves the photos on our home page; your browser contacts it to load them |
Hexplore is run from the United States, and your data is stored there. If you use Hexplore from elsewhere, your data is transferred to the United States.
We may also share data when the law requires it, or to protect the rights and safety of our users or others.
Deleting, for real
Removing your data truly removes it. This is a promise we've built Hexplore around.
- Delete moves a map, photo or trip to Recently Deleted. You can restore it for 30 days, after which it's deleted for good.
- Delete forever, in Recently Deleted, deletes it for good at once, with its files.
- Exports are deleted 24 hours after they're made, or at once if you delete them.
- Photos you can't use without Lifetime, such as one replaced on a bought map, are kept for three months, so they're there if you get Lifetime, and are then deleted for good.
- Deleting your account, in Settings, deletes everything personal for good after 7 days, including maps you bought. Signing in during those 7 days cancels it.
What we keep after you delete your account:
- Business records that can't identify you. We record events like "a map was bought" with only the month, what was bought and the amount, against a random identifier that has nothing to do with your name or email. The only link between that identifier and you is on your account, so deleting your account removes it, and the records can no longer be traced to you.
- What the law requires us to keep, such as tax and accounting records, which Paddle keeps as our merchant of record.
- Backups, where deleted data remains until they're replaced, within 30 days.
We don't keep your email address, or anything else about you, to contact you after you've gone.
Cookies
Hexplore needs a few cookies to work:
| Cookie | What it's for |
|---|---|
| Session | Keeps you signed in |
| XSRF-TOKEN | Protects your account from forged requests |
| appearance | Remembers light or dark mode |
| sidebar_state | Remembers whether the sidebar is open |
| hx_consent | Remembers your answer about analytics, for about six months |
Analytics, only if you say yes. On our public pages, the sign-up page and checkout, a banner asks whether we may count visits with Google Analytics. If you say yes, Google sets its cookies (_ga and _ga_ followed by our property's code) and receives the page you're on, your browser and device type, and a rough location. We use it to see which pages help people. We never use it inside the app, so nothing about your maps, photos or trips is measured. If you say no, we load nothing from Google and set none of its cookies. You can change your answer at any time with "Cookie settings" in the footer of the public pages, which also clears Google's cookies if you take your yes back.
We don't use advertising cookies. Your browser also stores a few preferences, such as how you sort your photos, on your own device.
Your rights
You can see, correct and delete your data in the app at any time, and download your photos and maps. You can also ask us to:
- tell you what data we hold about you, and give you a copy;
- correct or delete it;
- stop or limit how we use it;
by emailing [email protected]. Depending on where you live, such as in the EU, UK or California, the law may give you further rights, and you can complain to your local data protection authority.
Children
Hexplore is for people 16 and older. We don't knowingly collect data from anyone younger. If we learn that we have, we'll delete their account.
Changes to this policy
If we change this policy in a way that matters, we'll tell you by email or in the app before it takes effect.
Contact
Adam Bushman, LLC, doing business as Hexplore
2011 Hill St, Kaysville, UT 84037
Privacy questions and requests: [email protected]