Privacy policy

HEX is a free horror-film discovery project. This notice still needs an age approach and a checked retention and provider inventory before public accounts open.

If you join, HEX uses your email, sign-in and session details, username, profile information, film actions, saved work and anything you choose to publish. We also receive information you send in reports or support requests.

To run and protect the site, we may process IP addresses, browser details, requested pages and security logs. Please do not send passwords or sign-in codes in a support message.

We use account and contribution information to provide the features you request. We use limited technical and report information to keep HEX working, respond to problems and protect members. We may also keep information when the law requires it. The final notice will identify the lawful basis for each purpose; we will not call all processing consent.

Published reviews, lists, collections and any profile details you make public can be seen by others. Private drafts and personal film actions are not automatically published. Check your profile visibility and publication settings before sharing.

Supabase provides account and database services, Vercel hosts the website, and Resend delivers account emails. Images may be served by their source or storage provider. Playing a trailer connects to YouTube. The provider inventory and international-transfer details remain under review.

When you verify a new account, HEX sends its operator a private notification containing your username, email address and signup time to monitor registrations and operate the service. This includes accounts with private profiles. Your email address is not published on your profile. Signing in does not send this notification.

We keep account information while your account is active and retain reports, logs and backups only as needed for their purpose, security, recovery or legal obligations. Deleting an account does not instantly erase backup copies. The final notice will state the actual retention periods or criteria after they are verified.

You may request access, correction or deletion and exercise other applicable rights, including restriction, objection and portability. Start with available controls in Account. Signing out or clearing browser data does not delete your account.

Where self-service is unavailable, use the contact route. During private review, contact the person who invited you; no public request inbox is connected. Identity checks must be proportionate. Do not send passwords or identity documents unsolicited. The final process must explain effects on published content, legal retention and backups.

You can also complain to the ICO.

Settle the age policy and children’s privacy and safety assessment before public accounts open. Calling HEX a horror site or adding an age statement to terms does not establish that children cannot access it.

See Cookies and privacy choices.

HEX is operated by Richard Bushill, who is responsible for the personal data described in this policy. For privacy questions or requests, email hello@hex.watch.