Privacy Policy

Last updated 6 October 2026

This policy explains what HexaTape (hexatape.com and hexatape.ai) collects, why, and what we do with it. HexaTape is operated by Zrothers Inc., which is responsible for your information ("we", "us").

01What we collect

• When you visit. Our hosting providers process technical data such as your IP address, browser type and the pages you request, to deliver the site and protect it from abuse. We don't combine it with anything else to identify you.
• When you pay by card. Stripe collects your card details directly. From Stripe we receive what we need to run your subscription: your email, your name if you give it, your billing country and postal code, the card brand and last four digits, and the payment and subscription status.
• When you pay with crypto. We record the invoice (plan, coin, amount and the address we gave you) and the blockchain transaction that paid it, including the address it was sent from. Blockchain transactions are public and permanent, and anyone can see them. If you give us an email address for receipts, we keep it.
• Visit counts. When a page opens, it tells our own server which page it was, the button you clicked if any, the website that sent you (just its name, like google.com) and whether you're on a phone, tablet or computer. Our server adds these to daily totals and keeps nothing else: no IP address, no cookie, no ID. Known bots are ignored. On paid pages we count which tools get opened, by plan, never by member.
• Your access key. We store it only in a scrambled form (a hash) that can't be turned back into the key.
• Messages you send us. We keep them so we can answer and keep a record of support requests and refunds.
• Alerts and the daily brief. The places you ask us to send them (an email address, a Discord webhook link or a Telegram chat) and the alerts you set. The free weekly. If you sign up, your email address and when you confirmed it.

02Cookies

We set no cookies of our own on the free pages. Our hosting network, Cloudflare, sets one security cookie (__cf_bm) to tell people from bots. It is specific to this site, expires after 30 minutes of inactivity, and is not used to track you across sites or for advertising.

Paid pages add one strictly necessary cookie that keeps you signed in. It holds no tracking information and isn't shared with anyone. We don't use analytics or advertising cookies.

03How we use it

• To give you the subscription you paid for, and to help you when you contact us.
• To process payments and refunds, and to prevent fraud and abuse.
• To keep business, accounting and tax records, and to meet legal duties such as sanctions rules.
• To send you messages about your subscription: receipts, renewal notices and changes to our terms or this policy. We won't send you marketing email unless you ask for it.
• To send the alerts, daily brief and weekly email you ask for, to the places you choose.
• To see which tools and pages people use, so we know what to build and improve. We only ever look at totals.

04Who we share it with

Only the service providers that help us run HexaTape, each for its own part of the job:

• Stripe - card and other payments, and fraud prevention. Stripe also handles your information under its own privacy policy.
• DigitalOcean - hosting.
• Cloudflare - delivering the site and protecting it, as part of our hosting.
• Our email provider - to send and receive support email.
• Resend - sending alert, brief and weekly emails.
• Discord or Telegram - only if you choose them, to deliver your alerts. They handle those messages under their own policies.

We may use an AI service to help sort support messages and draft replies. If we do, we only use providers whose terms don't let them train their models on your messages.

We may also disclose information when the law requires it, to protect our rights or our users' safety, or to a buyer of the business, who would have to keep to this policy.

05How long we keep it

• Payment, invoice and tax records: as long as tax and accounting law requires, usually up to seven years.
• Subscription and access records: while your subscription is active and for up to two years after it ends, unless you ask us to delete them sooner (except records the law requires us to keep).
• Support emails: up to two years.
• Alert places and the weekly list: until you remove them or unsubscribe. Records of what we sent: 30 days.
• Visit counts: daily totals, kept for up to 400 days.
• Hosting logs: kept for a short time by our providers, under their own policies.

06Your choices and rights

You can ask us for a copy of the personal information we hold about you, or ask us to correct or delete it. Email support@hexatape.com. We will confirm that the request comes from you before acting on it. Some records, such as payment and tax records, we have to keep by law.

Depending on where you live (for example California, the EU or the UK), you may have further rights, including the right to complain to a data protection authority. We don't sell or "share" personal information as California law defines those terms.

07Security

The whole site is served over HTTPS. Card payments are handled by Stripe, a PCI DSS Level 1 certified payment provider. Crypto payments go straight to our own wallets, and our checkout never asks for or holds anyone's private keys or recovery phrases. Access keys are stored only as hashes. No system is perfectly secure, but if a breach affects your information, we will tell you as the law requires.

08Where your information is processed

In the United States. If you use HexaTape from somewhere else, your information is transferred to and processed in the US.

09Children

HexaTape is not meant for anyone under 18, and we don't knowingly collect information from children.

10Changes to this policy

When we change this policy, we update the date at the top. If a change materially affects how we use subscribers' information, we will email them before it takes effect.

11Contact

Email support@hexatape.com or write to us: