Legal

Privacy Policy

Last updated: 14 August 2026

This policy describes how the public marketing pages of hexg.io handle data. It is provided for transparency and has not yet undergone formal legal review; independent legal review is recommended before final production use.

Data Controller

HeXG
Lisbon, Portugal
contact@hexg.io

Information We Collect

On selected public marketing pages, we collect limited usage measurement data through Google Analytics 4, and only after you explicitly accept analytics cookies. This may include information such as pages viewed, approximate location derived by Google from your IP address, device and browser type, and referring source.

We do not intentionally send form field contents, authentication tokens, application data, security intelligence data, or administrative data to Google Analytics.

Purposes of Processing

Where you consent, analytics data is used to:

measure traffic and usage of the public marketing pages;
understand which content is consulted;
improve the clarity and structure of the public site.

Google Analytics

We use Google Analytics 4 (Measurement ID G-GX7EDV4BQE) to measure audience and usage. Google Analytics is limited to selected public marketing pages and is not intentionally loaded on authenticated, administrative, application, or other non-public areas of the service.

The Google Analytics script is loaded only after your explicit acceptance. Advertising-related consent signals (ad_storage, ad_user_data, ad_personalization) remain denied. We request IP-address anonymization from Google; however, we do not claim absolute anonymity.

For more information about how Google processes data:

Embedded Video

The homepage includes a product demonstration video hosted on YouTube. The video is not loaded when the page opens: we display a preview image served from our own domain, and the YouTube player is inserted into the page only after you click to play. Until that click, no request is sent to Google or YouTube, and no YouTube cookie or storage entry is created on your device.

When you choose to play the video, your browser connects to youtube-nocookie.com and Google receives the technical data required to deliver the video, including your IP address, device and browser information, and the address of the site you are visiting. That address is limited to the origin https://hexg.io and does not include the full page path. The youtube-nocookie.com domain reduces, but does not eliminate, the storage YouTube may use for the playback session. This processing only ever occurs as a result of your explicit action.

The embedded player is not covered by the analytics consent banner, because nothing is loaded from YouTube unless you actively press play. If you never press play, no data is shared with YouTube.

Consent and Cookie Management

Analytics is denied by default. When you first visit a public marketing page, a consent banner is shown. No Google Analytics resource is loaded until you choose “Accept”. If you choose “Decline”, no Google Analytics resource is loaded.

Your choice is stored locally in your browser under the key hexg_cookie_consent. You can change your choice at any time:

Legal Basis

Where applicable data protection law requires it, the legal basis for analytics processing is your consent, which you provide through the banner and may withdraw at any time using the “Manage cookies” control. Essential storage strictly necessary to operate the site does not rely on analytics consent.

Data Retention

Analytics data is retained by Google according to the retention setting configured for this Google Analytics property and Google’s own policies. We do not state a specific retention period here unless it is confirmed by the current configuration. Your local consent record persists in your browser until you clear it or change your choice.

Recipients and Service Providers

Analytics data collected with your consent is processed by Google as our analytics service provider. If you play the embedded homepage video, Google also acts as recipient of the connection data described under “Embedded Video”. We do not sell personal data. Access to non-public HeXG systems is restricted to authorized personnel.

International Data Transfers

Using Google Analytics may involve processing of data outside your country, including in the United States. The same applies if you choose to play the embedded video, which connects to Google servers. We do not guarantee that international transfers never occur. Such transfers, where they take place, rely on the safeguards implemented by Google.

Security

We apply technical and organizational measures appropriate to the public marketing pages, including HTTPS transport, strict separation between the public site and authenticated application areas, and limiting third-party resources on public pages to consent-based analytics and, on the homepage, an embedded video player that is loaded only if you click to play it.

Your Rights

Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability. To exercise these rights, contact the data controller identified above. You may also withdraw analytics consent at any time via “Manage cookies”.

Contact

For any privacy-related question or request, contact the data controller:

HeXG
Lisbon, Portugal
contact@hexg.io

Changes to This Policy

We may update this policy to reflect changes in our practices or for legal reasons. The “Last updated” date above indicates the latest revision. Material changes will be reflected on this page.