Privacy Policy

1. Overview

This Privacy Policy covers Spyfall and the independent Charade: The Original Game app for iOS and Android. The Charade section below describes that app specifically; browser rooms, website analytics and website advertising do not run inside Charade.

Charade: The Original Game

Charade is an offline, one-device party game with no accounts, ads or third-party analytics. We do not collect its personal decks, prompts, player names or game results on a developer-operated server.

Decks and saved games are stored in the app's local container, with score history and preferences on iOS. Apple's device backups may include iOS data depending on your settings. Android data is excluded from automatic cloud backup and device transfer. Charade has no in-app cloud sync.

On iOS, optional forehead controls process motion on the device without recording or uploading raw samples. Android uses button controls. Charade does not use the camera or microphone.

Optional lifetime purchases use Apple's App Store or Google Play. Charade checks verified transactions and stores purchase evidence locally to grant offline access; the store handles payment information. Buying Spyfall Pro does not grant Charade Pro, or vice versa. Purchases are separate between the Apple and Google stores.

Score sharing happens only when you choose to share and select a destination. Android shares neutral team labels and final scores. iOS offers a text preview with neutral labels by default and optional custom team names. Prompts, deck text and individual player-name fields are excluded. The receiving app or service handles shared text under its own practices.

In Settings you can clear saved games and delete personal decks separately. iOS also offers history and preference controls. Saved games retain immutable copies of their prompts, so clear both games and decks to remove those local copies. Apple manages device backups separately. Uninstalling removes local Android data. Purchases remain restorable through the store account that bought them.

If you contact support, we receive the email and information you choose to send so we can respond. Avoid including personal prompts or names unless needed. Opening this website from Charade is a separate browser visit governed by the website sections below.

Charade is a general-audience party game and does not knowingly collect personal information from children. Contact us using the email below with privacy or support questions.

2. Data We Collect

The browser games do not require an account. We process the following information to provide the website and online games:

3. How We Use Your Data

We use the information we collect to:

4. Analytics

When configured, the website uses PostHog for explicitly selected marketing-page events. Browser game entry, invitation, and room routes are excluded from analytics. Website automatic interaction capture and session recording are disabled. Room nicknames, access tokens, private cards, votes, and guesses are not sent to analytics.

PostHog uses cookies and local storage to recognize a browser across marketing visits and processes browser/device information. Analytics URLs exclude query strings and fragments, and referrer fields are cleared. Clear this site’s browser data to remove stored analytics identifiers.

5. Data Storage

Browser room access tokens are stored in this browser tab’s session storage to recover membership after refresh. Leaving a room or discovering an expired membership removes its saved access. Closing a tab may lose access; some browsers copy session storage when duplicating a tab. If storage is blocked, access lasts only while the page remains open.

Private cards are held in page memory, not saved in browser storage. Cards are concealed when you leave the page or the room disconnects. Live rooms are temporary and expire after inactivity; a server restart can end a room. The server can also save durable history in PostgreSQL, including player identifiers, nicknames, votes, assignments, drawn locations or words, final-guess information and outcomes. This history is separate from live-room expiry. Leaving a room removes membership access but does not immediately erase recorded history. Contact us about data requests.

The application’s default history policy makes a room’s recorded history eligible for deletion 30 days after the room was created. When deployed and enabled, cleanup runs in limited batches at startup and hourly; operators can configure the period and schedule. Expired history stops receiving new game records, while live play can continue. Cleanup failures, downtime or a backlog can delay deletion, so 30 days is not a guaranteed deletion deadline. Deployment of these controls has not yet been confirmed. Hosting logs, database backups and analytics are managed separately and are not erased by history cleanup; their deployed retention periods have not yet been confirmed.

A service worker downloads the application shell, icons and bundled local packs for offline play. It only stores an explicit list of public build files, never room responses, socket tickets or credentials. Local player names, assignments and scores stay in page memory and reset on reload. Clear this site’s browser data to remove its offline download.

Public location packs can be cached by the browser. Room and private API responses are not cached. Marketing analytics data, when enabled, is processed by PostHog in accordance with its privacy policy.

Optional website advertising

When enabled, one manual Google AdSense placement is available only on the public rules page at spyfall.beffa.xyz. Advertising is disabled on the parent beffa.xyz site, the dashboard, invitations, local games, online rooms and results. Entering or leaving the advertising page opens a fresh document so advertising code does not continue running inside a game.

The Advertising choices button loads Google’s consent manager. It can process connection and device information and store your consent preferences. The ad loader runs only after the manager confirms the required purpose and Google vendor consents. Unknown, declined, unavailable or unsupported consent states leave ads off. Games remain available if you decline, block ads or are offline.

If you allow advertising, Google may use cookies, identifiers, IP address and browser information for ad selection, measurement and fraud prevention. Visit policies.google.com/technologies/ads for Google’s advertising information. We do not pass room codes, credentials, names, cards, words, clues, votes or guesses to advertising code. Ad and consent responses are not included in our offline cache.

Reopen Advertising choices on the rules page to change your permissions. Withdrawing consent reloads the page to stop previously loaded ad code. Availability depends on deployment configuration and provider approval; a visible choices control does not guarantee an ad will be served.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal data, including:

7. Children's Privacy

Spyfall is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. The independent Charade app is described in its own section above.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.