Back to Hecate

Privacy Policy — Hecate

Effective Date: 2026-03-30 · Last Updated: 2026-03-30

This Privacy Policy explains how Marco Polo Research Lab LLC, a California limited liability company ("MPR Lab", "Company", "we", "our", "us"), collects, uses, discloses, and protects information when you use Hecate (the "Service").

1. Scope and Controller

Effective March 30, 2026, Hecate is operated by Marco Polo Research Lab LLC. This policy applies to the public website, the authenticated crossword application, checkout flows, and related support services.

2. Information We Collect

Account and authentication data

We use Google Identity Services to sign you in. We receive profile fields needed to operate the account, including your name, email address, and profile image.

Gameplay and generation data

We collect and store information needed to run the Service, including topics you submit for puzzle generation, generated puzzle metadata, crossword content, credit balances, and shared puzzle activity.

Billing and transaction data

If paid checkout is enabled, we process credits and billing metadata required to operate credit-pack purchases. Payment transactions may be handled by Paddle or another authorized provider, and we receive transaction metadata but not full payment card numbers.

Technical, analytics, and support data

We process technical data such as IP address, browser type, timestamps, request metadata, service logs, and analytics signals for security, troubleshooting, abuse prevention, and product improvement. We also process support communications you send to us.

3. How We Use Information

4. Google User Data

We use Google user data only for sign-in and account identity. Google profile data is not sold and is not used for advertising. We use that data solely to provide and secure the authenticated Service.

5. Sharing and Disclosure

We do not sell personal information. We may share information with service providers strictly as needed to operate the Service, including identity providers, hosting providers, analytics tooling, billing infrastructure, and payment processors.

We may also disclose information when required by law, to protect rights or safety, or in connection with a merger, acquisition, financing, or other corporate transaction.

6. Cookies, Local Storage, and Analytics

7. Do Not Track Signals

Some browsers offer a "Do Not Track" setting. At this time, Hecate does not respond differently to browser Do Not Track signals because there is no universally adopted standard for how to interpret them.

8. Data Retention

We retain account, puzzle, billing, and operational data for as long as reasonably needed to provide the Service and satisfy legal, accounting, dispute-resolution, and security obligations.

9. Security

We use technical and organizational safeguards designed to protect information, including access controls, transport security, and service monitoring. No system is completely secure, and we cannot guarantee absolute security.

10. Your Rights and Choices

Depending on your location, you may have rights to access, correct, export, or delete personal information, and to object to or restrict some processing. To submit a request, contact us at support@mprlab.com.

11. Children’s Privacy

Hecate is intended for a general audience and is not designed to knowingly collect personal information from children under 13 without any consent required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material updates will be reflected by revising the effective date on this page.

13. Contact

For privacy questions, account deletion requests, or data-rights requests, contact support@mprlab.com or visit mprlab.com.