Back to Hecate

Privacy Policy — Hecate

Effective Date: 2026-03-30 · Last Updated: 2026-08-10

This Privacy Policy explains how Marco Polo Research Lab LLC, a California limited liability company ("MPR Lab", "Company", "we", "our", "us"), collects, uses, discloses, and protects information when you use Hecate (the "Service").

1. Scope and Controller

Effective March 30, 2026, Hecate is operated by Marco Polo Research Lab LLC. This policy applies to the public website, the authenticated word-puzzle application, the iOS and Android apps, checkout flows, and related support services.

2. Information We Collect

Account and authentication data

We use Google Identity Services to sign you in. We receive profile fields needed to operate the account, including your name, email address, and profile image.

Gameplay and generation data

We collect and store information needed to run the Service, including topics you submit for puzzle generation, generated puzzle metadata, crossword content, credit balances, and shared puzzle activity.

Billing and transaction data

We process credits and billing metadata required to operate Hecate Pro. RevenueCat processes the subscription entitlement and lifecycle across the browser, iOS, and Android. Browser purchases are handled by Paddle as merchant of record; native purchases are handled by Apple or Google. We receive account-linked application, store, product, event, and transaction identifiers, subscription status, credit disposition, and related dates, but not full payment card numbers.

Technical, analytics, and support data

We process technical data such as IP address, browser type, timestamps, request metadata, service logs, and analytics signals for security, troubleshooting, abuse prevention, and product improvement. We also process support communications you send to us.

3. How We Use Information

4. Google User Data

We use Google user data only for sign-in and account identity. Google profile data is not sold and is not used for advertising. We use that data solely to provide and secure the authenticated Service.

5. Sharing and Disclosure

We do not sell personal information. We may share information with service providers strictly as needed to operate the Service, including identity providers, hosting providers, analytics tooling, billing infrastructure, and payment processors.

We may also disclose information when required by law, to protect rights or safety, or in connection with a merger, acquisition, financing, or other corporate transaction.

6. Cookies, Local Storage, and Analytics

7. Do Not Track Signals

Some browsers offer a "Do Not Track" setting. At this time, Hecate does not respond differently to browser Do Not Track signals because there is no universally adopted standard for how to interpret them.

8. Data Retention

We retain account, puzzle, billing, and operational data for as long as reasonably needed to provide the Service and satisfy legal, accounting, dispute-resolution, and security obligations.

9. Account and Data Deletion

To request deletion from any device, email support@mprlab.com from the email address associated with your Hecate account. State whether you want us to delete your full account and associated data or only specified data. We may ask you to verify account ownership before acting on the request.

For a verified full-account request, we delete or anonymize the Hecate account profile, saved and generated puzzle content, gameplay and sharing activity, and service-side billing links that we are not legally required to retain. We also request deletion of the corresponding RevenueCat customer record where applicable. A full-account deletion is permanent, and remaining Hecate credits tied to the deleted account cannot be restored.

We ordinarily complete a verified deletion request within 30 days. If applicable law requires a shorter period or permits additional time, we will follow that rule and notify you if more time is needed. We may retain limited transaction, tax, accounting, dispute, fraud-prevention, or security records when legally required or reasonably necessary, then delete or anonymize them after the applicable obligation expires.

Deleting your Hecate account does not cancel an Apple App Store or Google Play subscription. Cancel Hecate Pro through your device's subscription settings before requesting deletion to stop future renewals. Apple and Google control their own purchase records; we cannot delete records that those stores are legally or operationally required to keep.

10. Security

We use technical and organizational safeguards designed to protect information, including access controls, transport security, and service monitoring. No system is completely secure, and we cannot guarantee absolute security.

11. Your Rights and Choices

Depending on your location, you may have rights to access, correct, export, or delete personal information, and to object to or restrict some processing. To submit a request, contact us at support@mprlab.com.

12. Children’s Privacy

Hecate is intended for a general audience and is not designed to knowingly collect personal information from children under 13 without any consent required by applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material updates will be reflected by revising the effective date on this page.

14. Contact

For privacy questions, account deletion requests, or data-rights requests, contact support@mprlab.com or visit mprlab.com.