Privacy Policy

Last updated: April 8, 2026

1. Information We Collect

Account Information

When you create an account, we collect your username and email address. If you sign in via Google or Microsoft, we receive your name, email address, and profile identifier from those providers.

Game Data

We collect game scores, statistics, match history, and gameplay data to provide leaderboards, rankings, and game functionality.

Technical Data

We automatically collect your IP address, browser type, and connection data for security, rate limiting, and abuse prevention.

Cookies and Local Storage

We use browser local storage to keep your authentication token, game preferences, and offline game progress. We also use a small number of third-party services that may set their own cookies when you interact with them:

Google Analytics — helps us understand how players use the site (page views, popular game modes, etc.). Google may set cookies to recognize returning visitors.
hCaptcha — used on sign-up and login forms to block bots. hCaptcha may set cookies to detect automated behavior.
PayPal — loaded only when you open the Coin Pack shop to process optional payments. PayPal sets its own cookies during checkout.
Google & Microsoft sign-in — if you choose to sign in with these providers, they may set cookies as part of their authentication flow.
Cloudflare — our content delivery network, which may set a small session cookie for security and bot protection.

On your first visit you will see a cookie consent banner at the bottom of the page. You can accept all cookies or decline non-essential ones — the game works either way. Your choice is remembered so the banner only appears once. You can change your mind at any time by clicking the Cookie preferences link in the site footer.

We do not currently display advertising on LexiLayers. If we introduce ads in the future (via Google AdSense), we will update this policy and re-prompt all users for fresh consent before any advertising cookies are set.

2. How We Use Your Information

We use the information we collect to:

Operate and maintain the Service.
Authenticate your identity and manage your account.
Provide game features including leaderboards, rankings, and multiplayer matching.
Prevent cheating, abuse, and unauthorized access.
Send account-related emails (verification, password reset) when requested.

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following cases:

Public game data: Your username, avatar, scores, and rankings are visible to other players on leaderboards and in multiplayer games.
Legal requirements: We may disclose information if required by law or to protect the rights, safety, or property of LexiLayers or its users.

4. Data Storage and Security

Your data is stored on secured servers. Passwords are hashed using bcrypt. Authentication tokens are signed using industry-standard JWT. We take reasonable measures to protect your data, but no method of transmission over the Internet is 100% secure.

5. Third-Party Authentication

If you sign in using Google or Microsoft, those providers may collect data according to their own privacy policies. We only receive the information necessary to create and link your account (name, email, provider ID).

6. Your Rights

You have the right to:

Access your personal data through your account Settings.
Update your profile information, username, and avatar at any time.
Delete your account and associated data through the Settings page.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.