Privacy Policy
Last updated: 22 August 2026
Spysus has no accounts, no sign-up and no database. We never ask for your email, phone number or password, and we do not sell or share personal information.
What we collect
To run a game we handle the following, and nothing more:
| Data | Why | How long |
|---|---|---|
| Display name & avatar | So other players can identify you | Held in server memory only while the room is active, then discarded |
| Room code | To connect players in the same game | Discarded when the room closes |
| IP address | Rate limiting, to stop abuse and spam room creation | Transient — counted in memory, never written to a database |
Game rooms exist only in server memory. When a room ends, everything in it is gone. There is no database and no gameplay history.
Stored on your device
The app saves two values locally so you can rejoin after a refresh or a dropped connection:
- spy_player_name — the display name you last used
- spy_room_code — the room you last joined
These stay on your device. Clearing site data, or uninstalling the app, removes them.
Analytics
We use analytics to understand how many people play and where the game breaks. These services may collect your IP address, device and browser type, approximate region, and the pages or screens you view:
- PostHog — product analytics and session replay, which records interactions such as taps and navigation within the app
- Cloudflare Web Analytics — privacy-focused page view counts, no cookies
- Plausible — privacy-focused page view counts, no cookies
We do not use advertising networks and we do not track you across other apps or websites.
Payments
Premium location packs are currently free and no payment is taken. If paid packs are offered in future on the website, card details are handled entirely by Stripe and never reach our servers. Purchases made inside the mobile apps would be handled by Apple or Google under their own terms.
Children
Spysus is a general-audience party game. It is not directed at children under 13, and we do not knowingly collect personal information from them. Because there are no accounts, the game collects no profile data from any player.
Your choices
- Play without giving a real name — any display name works
- Clear local data by clearing site data in your browser, or uninstalling the app
- Use "One Device" mode, which runs entirely on your device and needs no network connection at all
- Browser or system "Do Not Track" and tracker-blocking settings are respected by the analytics tools above
Changes
If this policy changes, the date at the top of this page is updated. Material changes will be noted on the site.
Contact
Questions about privacy or a request about your data: privacy@spysus.com