Privacy at Hexhaven

Hexhaven uses Firebase Authentication for Google sign-in and Firebase Realtime Database to save and share games. Your browser stores your sign-in session until you sign out. We do not request Gmail, contacts, calendars or Drive access.

Public lobby titles, player names, chosen game icons, rankings, wins, losses, ratings, board positions, turn history and resource totals can be seen by visitors. Appearance preferences are saved to your profile and locally on your device. Players can read their own cards; spectators cannot read private hands. The host’s browser runs the game and holds the complete game state, including every player’s hand. This is a casual host-run game, without server-enforced anti-cheat.

Private rooms are absent from the public list. People who have the room code can join while the lobby has a seat. Unfinished games remain saved so players can resume them. Completed games, chats and temporary match records become eligible for cleanup five minutes after the game ends, only after player results are saved. Cleanup runs while signed-in players use the site and may be delayed when nobody is online. Player statistics and ratings remain saved. The host needs to keep the game open for other players’ moves to be processed.

Chat messages are saved in Firebase with your player name and time sent. Completed-room chat is deleted along with its game after the retention period. Lobby chat and public-table chat are visible to visitors. Private-table chat is restricted to table members. The latest 100 messages are displayed; older messages may remain stored.

There are no advertisements or advertising trackers. Google processes sign-in and hosting data under Google’s Privacy Policy. Contact the site owner for account or saved-game deletion.