Privacy policy

Effective date: 7 July 2026

1. Who this policy covers

This Privacy Policy covers the Cosyhex game on the web, iPhone, iPad, and Android, together with the related multiplayer relay and support pages. Cosyhex is developed and operated by Cosy Studio, LLC ("Cosy Studio", "we", or "us"), a company based in Washington, United States. Cosy Studio is the controller of the limited information described here.

For privacy questions or requests, email [email protected].

2. Information we do not ask for

Cosyhex has no user accounts. We do not ask for or store your real name, email address, phone number, postal address, password, contacts, precise location, payment card details, advertising identifier, or government identifier as part of playing the game.

If you buy a native edition through an app store, Apple or Google processes the purchase under its own privacy policy. We receive ordinary developer sales reports, but Cosyhex does not receive your card details or create a customer profile from that purchase.

3. Information kept on your device

Cosyhex uses local app or browser storage for features you ask it to provide. This includes:

• A random player identity secret. This lets the game recognise your seat after a refresh or brief disconnection. It is created on your device and is not an advertising ID.
• Saved games and recent-room details. Solo saves remain on your device. A host may download an online save file to their own device.
• Preferences. For example, audio settings, display choices, and whether you have seen the introductory guide.
• Cached game files. These let the installed game and previously loaded web app start and support solo play offline.

You can delete this information by clearing Cosyhex app data or browser site data, deleting the app, and deleting any save files you downloaded. Clearing it may remove saved games and prevent you from reclaiming a seat in a recent room.

4. Multiplayer games and chat

Cosyhex is host-authoritative. One player's device runs the rules engine and holds the current game. Our server acts as a stateless relay: it forwards room messages among the connected players, but it does not save the game, room chat, player names, or room membership after the room ends. If a player reconnects, the host sends the current state again.

Display names and chat messages are shared with the other people in the room you join. Choose a display name that does not reveal information you want to keep private. Other players may take screenshots or otherwise record what appears on their own screens, which we cannot control.

5. Operational diagnostics we collect

Cosyhex sends a small amount of technical data to our own server so we can find crashes, slow devices, and connection failures. This collection is required for operating and improving the game and cannot currently be switched off inside the app.

Depending on what happens, a diagnostic report may include:

• The Cosyhex version, platform, browser or device type, operating system, and a shortened user-agent string.
• A page category with room codes removed, such as /room/:code.
• Error type, error message, a limited code stack trace, and recent technical event labels.
• Coarse performance measurements such as load time, frame rate, viewport size, long tasks, pixel density, and available device-memory class.
• Connection measurements such as a close code, reconnect counts, round-trip time, and whether the host or network appeared unavailable.
• A random identifier that lasts for one app page load and is not your player identity.
• A coarse country code supplied by our network provider. We do not attach your raw IP address to the diagnostic report.

Diagnostic reports are deliberately built not to include:

• Your player identity secret or room code.
• Your display name or another player's name.
• Chat messages or game-save contents.
• Your precise location, contacts, photos, microphone, or camera data.

6. Website analytics and ordinary network logs

On the public web version, we may use Cloudflare Web Analytics for aggregate visit and page-use counts. It does not use advertising cookies or follow you across sites. This analytics service is not included in the native app bundle.

Like other online services, our hosting and network providers process request details such as an IP address, date and time, requested URL, and browser type to deliver traffic, protect the service, and investigate abuse. We do not combine these network records with a Cosyhex account, because Cosyhex has no accounts.

7. How we use information

We use the limited information described in this policy only to:

• Deliver the website and connect multiplayer rooms.
• Restore your seat and preferences on your device.
• Diagnose crashes, poor performance, and connection problems.
• Measure aggregate service health and improve compatibility.
• Secure the service, rate-limit misuse, and respond to incidents.
• Answer support messages that you choose to send us.

We do not use this information for targeted advertising, cross-service tracking, or automated decisions about people.

8. When information is shared

We do not sell personal data. Limited information may be handled by:

• Cloudflare, which delivers and protects our public sites and may provide cookieless aggregate web analytics.
• Infrastructure providers working for Cosy Studio, which host our website, multiplayer relay, and operational logs.
• Apple or Google, when you download or buy the game from their store. Their processing is controlled by their own privacy policies.
• Other players in your room, who receive the display name, chat, and game messages needed for your shared game.

We may also preserve or disclose information when reasonably necessary to comply with law, protect users, investigate fraud or abuse, or defend the rights and security of Cosy Studio. If the studio is reorganized or sold, information may transfer as part of that transaction under protections consistent with this policy.

When a service provider processes information for Cosy Studio, we require contractual or other safeguards that provide protection consistent with this policy and applicable law. Apple, Google, and other players in a room handle information independently under their own terms and privacy practices, so this service-provider requirement does not imply that we control them.

9. Security

We use encrypted HTTPS and secure WebSocket connections in production. Diagnostic payloads are rebuilt from a strict list of allowed fields, room codes are removed, string lengths are capped, and public reporting endpoints are rate-limited. Access to hosting and support systems is limited to people who need it to operate the service.

No online system is perfectly secure. Please do not place sensitive personal information in a player name, chat message, or support email.

10. Retention and deletion

• Rooms, game state, and chat: not stored by our relay after the room ends.
• Data on your device: kept until you clear app or site data, delete the app, or delete a save file.
• Operational logs and diagnostics: kept only while reasonably needed for security, incident response, and routine debugging, then deleted, allowed to roll off, or reduced to aggregate counts that do not identify a player. Error signatures may be retained longer to recognise whether a software problem has returned.
• Support correspondence: kept while we handle the request and as reasonably needed to document the resolution or meet legal obligations.

Diagnostic reports have no account ID or stable player ID, so we normally cannot locate a report as belonging to a particular person. If you have a deletion question, email [email protected] with the approximate date, time, platform, and nature of the event. We will explain what can be found and delete eligible information we can reasonably identify.

11. Children

Cosyhex is intended for players aged 13 and older. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has sent personal information to us, email [email protected] so we can investigate and remove it.

12. International processing

Cosy Studio is based in the United States, and Cloudflare operates a global network. Information may therefore be processed in the United States and other countries whose laws may differ from those where you live. We use providers and safeguards appropriate to the limited processing described here.

13. Your privacy rights

Depending on where you live, you may have rights to ask what personal data we hold, request a copy, correct it, delete it, restrict or object to processing, or appeal a response. You may also complain to your local data-protection authority. We will not discriminate against you for making a privacy request.

Most Cosyhex information is either on your own device or is anonymous operational data that we cannot connect back to you. We will still respond and help you understand the choices available. Email [email protected].

14. Changes to this policy

If our practices change, we will update this page and its effective date. If a change materially affects how Cosyhex handles information, we will provide additional notice where appropriate.

15. Contact

Cosy Studio, LLC
Washington, United States
Email: [email protected]
Product: cosyhex.com
Support: cosy.studio/cosyhex/support