Privacy Notice

Information we handle

• Account name, email address, password hash, policy-consent record, optional promotional-email consent and unsubscribe status, and secure sign-in session.
• If you use the friend invitation program, your invitation code, the connection between the inviting and new account, email-verification status, and each reward’s issue and use status.
• Optional birth date and time for the five-element reading, and answers to optional recent-state check-ins.
• Saved products, cart selections, orders, payment status, totals, contact details, delivery address, and available tracking details.
• For a return request, the selected return reason, optional explanation, product photos, review decision, and the date you confirm dropping off the prepaid return package.
• For an order-cancellation request, the order reference, request status, and request timestamps.
• Product IDs viewed, order-cancellation request status and timestamps, short-lived security/rate-limit records, and information you include in a support message.
• First-party site usage records: which HEXI page or prompt was viewed, which entry was selected, and the date. We use a random browser identifier for visitors and associate these records with an account after sign-in. We do not store check-in answers or Between Us answers in these usage records.

We do not ask visitors to submit their age or date of birth for access. When you log in or create an account, HEXI records the date and version of the customer policies you accept.

How we use information

We use information to operate and secure accounts, provide the optional reading and check-in features, remember requested selections, process orders, calculate shipping and applicable tax, send account and order emails, respond to support requests, prevent abuse, and review aggregate product interest. If you separately opt in to promotional emails, we use your email address and account name to send HEXI product news and offers. Each promotional email includes an unsubscribe link that works without signing in. Unsubscribing does not stop account, order, shipping, or security emails. We do not sell personal information or use it for cross-site behavioral advertising.

We use first-party usage records to understand aggregate, unique-person rates for navigation, sharing, registration choices, and email subscription prompts. Administrators see aggregate counts, not individual browsing histories.

We use friend invitation records only to connect a new registration with its inviter, issue the two rewards after email verification, track whether each reward has been used, and prevent duplicate rewards.

Between Us

Between Us works without an account. We store each participant’s six choices, an optional short answer, their sharing choices, and their separate consent to create a shared result. The optional answer stays private unless its author expressly chooses to share it.

If you choose to import an existing Five Elements profile, we derive a limited chart from your birth date and optional time and time zone. The derived Day Master, pillars and seasonal support references can appear in the shared elemental result only when both participants choose to import and agree to the shared result. Your raw birth date, birth time, birthplace and time zone are not copied into the shared connection record. Birthplace entered in Between Us is not transmitted or saved. Your personal Five Elements profile remains separate.

A one-time invitation link expires after seven days and can be revoked. Private sessions normally expire after 30 days; participants can delete one sooner. Both participants must consent before we create a shared result. Public sharing cards and copied summaries do not include private answers. A durable Our Connections record is created only after both participants separately sign in and choose Save This Connection. It contains the six agreed-to-save choices, shared result, ritual, derived elemental result when available, and a product recommendation and favorite snapshot. Optional answers appear only if their authors chose to share them. Earlier individually saved summaries remain private summary-only records.

You may enter both birth profiles with permission from the other person and provide their name or nickname. This creates a private elemental reflection. If you explicitly save it while signed in, the nickname and derived charts remain only in your account, separate from jointly shared records. It does not give the other person access to your account or imply their consent to a shared record. Raw birth details are used for calculation and are not copied into that private record. You can delete it from your history.

Either participant may withdraw sharing, which stops access to the shared record and clears its answers, elemental reading and recommendation snapshot. A person can also remove a record only from their own account history. Neither action deletes a personal Discover Your Elements profile. We do not use Between Us answers for advertising, relationship or health diagnoses, or third-party marketing platforms. Product suggestions within Between Us use the choices both people agreed to share.

Service providers

Stripe processes checkout and payments. Resend sends account, transactional, and—when you opt in—promotional emails. Cloudflare provides the site hosting, Workers, and D1 database. These providers process information to provide their services and may handle it under their own privacy and security terms.

We share information with providers needed to host the site, store account and order records, process payments, send requested email, and deliver orders; when required by law; or when needed to protect customers, HEXI, or the public.

Payment details

Payment details are entered through Stripe’s checkout experience. HEXI receives payment and order status and does not intentionally store full card numbers or card security codes in its application database. Stripe handles payment information under its own terms and privacy notice.

Retention and your choices

Guest birth readings, check-in answers, cart selections, and saved products stay in the browser session until that session is closed. If you create an account, HEXI transfers the information you chose to provide into the account. Recent-state check-in answers are retained for no longer than 30 days and are removed by a daily cleanup. Your five-element birth profile is not removed by that cleanup. Account and contact details remain while your account is active. Cancellation requests, return requests and photos, shipping records, and transaction records may be retained as needed for support, tax, accounting, disputes, and legal obligations.

To request a copy of your account data or to close and delete your account, contact HEXI customer support at hexi-supports@hexi-herbal-incense.com. Account data download and account deletion are handled by support and are not available as self-service options in the account interface. We will verify your identity and explain any information that must be retained for an open order, tax, accounting, dispute, or other legal obligation.

Children and teens

HEXI does not show an age screen before visitors browse or sign in. People under 13 should browse only with a parent or legal guardian present and supervising. Do not submit a child’s personal details, birth profile, or check-in answers. A parent or guardian should manage any account and provide personal, delivery, or payment details on the child’s behalf. Teenagers should involve a parent or guardian when sharing personal information or making a purchase.

Security and updates

HEXI uses safeguards including password hashing, rate limits, and secure session cookies. No online service can guarantee absolute security. We may update this notice when our practices change and will post a revised effective date.

For privacy requests, email hexi-supports@hexi-herbal-incense.com. Customer support hours are 9 a.m.–9 p.m. Eastern Time.