Clues & Culprits › Privacy

Privacy Policy

Short version: you can play without telling us anything. If you make an account, we keep your email, your game record and what you bought — and nothing else.

Last updated: Oct 24, 2026

Playing without an account

Your progress on each case, your notes, your settings and your stats are saved in your browser’s local storage. They never leave your device unless you choose to share a result or a scenario link. Clearing your browser data deletes them, and we cannot recover them.

If you make an account

Accounts are optional. We store:

• Your email address, to send sign-in links. If you sign in with Google, we receive your email address and nothing else from your Google account.
• Your game record (cases closed, times, achievements, settings), so it follows you to other devices.
• Your purchases: which plan or pack you have and until when. Not your card details or address.
• Where you came from, if you arrived through a link with campaign tags (for example a newsletter), so we know which links work.
• Your newsletter choice. We only email you news if you ticked the box; you can change it on your account page at any time. Sign-in emails are always sent.

Accounts, records and purchase status are stored on Cloudflare, which also hosts the site. Sign-in emails are sent through Resend, our email provider. You can download everything we hold about you, or delete your account and record, from your account page.

Payments

Purchases are handled by Waffo Pancake, our merchant of record: they are the seller on your receipt, take the payment, and handle sales tax and VAT. They process your card, billing country and email under their own privacy policy. We receive only an order reference, the plan, its status and your account id — never card numbers.

What else we collect

Clues & Culprits currently runs no analytics.

When you click “Count me in” or “Notify me”, we record the item and the page, without any information about you. When you share a link to unlock the hint pages, we store a random code for your browser and count how many other browsers open it — nothing else.

Like every website, our hosting provider (Cloudflare) processes standard request data (such as IP address and browser type) to deliver pages and protect against abuse. We do not use it to identify you.

Cookies

Clues & Culprits sets no advertising or tracking cookies. If you sign in, one cookie keeps you signed in; local storage is used for the game itself.

Sharing links

“Share” links contain your board state (which suspects are proven and your notes) in the part of the address after the #. That part is not sent to our servers when someone opens the link.

Children

Clues & Culprits is suitable for all ages and can be played without giving any personal information. Accounts and purchases are for people aged 16 and over, or younger with a parent’s permission.

Your rights

You can see, download, correct or delete your data at any time from your account page, or by writing to us. We reply within 30 days.

Contact

Questions: [email protected].