This Privacy Policy explains what information Axidus LLC (“we”, “us”) handles when you use Hexcalibur: the website at hexcalibur.io (including the blog), the editor at app.hexcalibur.io, and the documentation at docs.hexcalibur.io(together, the “Services”).
If you do not agree with this Policy, please do not use the Services.
1. Who we are
Hexcalibur is made by Axidus LLC, a software company registered in the State of New Jersey, United States. You can reach us at legal@axidus.io.
2. The short version
- Hexcalibur is free. There are no accounts, no sign-in, and no payments.
- Your artwork, packs, palettes, and preferences are stored only in your own browser. We never receive them.
- We do not run analytics, advertising, or tracking of any kind, and we do not set cookies.
- Our hosting provider keeps standard server request logs for security and operations.
3. Your work stays in your browser
Everything you make in the editor (art, packs, palettes, reference images, and editor preferences) is saved in your browser's own storage (IndexedDB and localStorage) on your device. It is never uploaded to us, and we have no way to see, recover, or delete it.
That also means you are in control of it: clearing your browser's site data for app.hexcalibur.io erases it, and it does not follow you to other browsers or devices. To back up or move your work, export your packs from the editor's File menu.
4. What is collected
- Server logs. Our hosting provider (Vercel) automatically records standard request logs when your browser loads a page or file from the Services: IP address, user agent, timestamp, and the requested path. These are used for security, abuse prevention, and debugging, and are kept for a short period.
- Messages you send us. If you email us, we keep your message and any details you choose to share so we can reply.
That is the full list. We do not collect names, email addresses, payment details, usage analytics, or the contents of your work. We do not sell personal information, show advertising, or use anything to train machine-learning models.
Fonts on the Services are served from our own domains, so loading a page does not send a request to a font provider.
5. Service providers
The Services rely on the providers below. They process limited technical information (such as your IP address and browser details) as part of delivering their part of the Services.
| Provider | Purpose | Region |
|---|---|---|
Vercel Web hosting and edge network for hexcalibur.io, app.hexcalibur.io, and docs.hexcalibur.io, including standard request logs | Web hosting and edge network for hexcalibur.io, app.hexcalibur.io, and docs.hexcalibur.io, including standard request logs | United States / global edge |
YouTube (Google) Tutorial video thumbnails and playback in the editor's tutorials panel, loaded only when that panel is shown or a video is played | Tutorial video thumbnails and playback in the editor's tutorials panel, loaded only when that panel is shown or a video is played | Global |
The tutorial videos in the editor come from YouTube. When the tutorials panel shows a video thumbnail, or you play a video, your browser loads it directly from YouTube, and YouTube's own privacy policy applies to that request. We may also share information with law enforcement or other parties when required by valid legal process.
Most of these providers are located in the United States. If you use the Services from outside the United States, the technical information above is processed in the United States and other countries where those providers operate.
6. Cookies and browser storage
We do not set cookies. The Services use your browser's local storage only for things that stay on your device:
- Your work and editor preferences (IndexedDB and
localStorageon app.hexcalibur.io), as described in Section 3. - Display preferences (
localStorage), such as your light or dark mode choice on the website.
None of this is sent to us. YouTube may set its own cookies when you play a tutorial video.
7. Data retention
- Server logs: kept by our hosting provider for a short period (typically up to 30 days)
- Emails you send us: kept for up to 2 years from last contact
- Your work: never held by us; it stays in your browser until you delete it
8. Your privacy rights
Depending on where you live (for example, under the GDPR in the EEA and UK, or the CCPA / CPRA in California), you may have the right to access, correct, delete, or object to the processing of personal information we hold about you, and to lodge a complaint with your local data-protection authority. Because we do not keep accounts or store your work, the only personal information we are likely to hold is server log data and any emails you have sent us.
Where the GDPR applies, we process server logs on the basis of our legitimate interest in keeping the Services secure and working, and emails on the basis of responding to your request.
To exercise any right, email legal@axidus.io with “Privacy request” in the subject line. We will respond within 30 days. We do not discriminate against you for exercising these rights.
9. Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under 16 in the EEA / UK). If you believe a child has sent us personal information, please email legal@axidus.io and we will delete it.
10. Third-party links
The Services, including the blog and documentation, may link to third-party sites and services. This Policy does not apply to those, and we are not responsible for their practices. Review their privacy policies before sharing information with them.
11. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If we ever start collecting new kinds of information, we will update this Policy before that change takes effect. Continued use of the Services after an update means you accept the updated Policy.
12. Contact us
Questions about this Policy or our privacy practices? Email legal@axidus.io and we will get back to you.
Axidus LLC
28 Spring St, Unit #652
Princeton, NJ 08542, United States