Privacy Policy

Effective date: October 28, 2026. thespyfall.com is a free browser game with no accounts and no sign-up. This page explains exactly what data the game touches, why, and for how long.

What We Collect

Nothing, for local pass-and-play

In local pass-and-play mode, the entire game runs in your browser. Player names and game state stay on your device and are never sent to a server.

Minimal session data, for online rooms

When you create or join an online room, the game stores:

• An anonymous session ID — created automatically via Firebase anonymous authentication. No email, password, name, or account is required or collected for this.
• The display name you type — visible to other players in your room. It can be anything; it doesn't need to be your real name.
• Room and game state — the room code, roles, votes, and timer, stored in Firebase Realtime Database (a Google service) only while the room is active.

Room data is temporary: it is deleted when the room is cleaned up after the game ends or the room goes inactive. Your display name is also saved in your own browser's local storage purely so you don't have to retype it next time — you can clear it anytime by clearing your browser data.

Optional issue reports and feature requests

If you choose to send feedback, the type, title, message, game version and submission time are stored privately in Cloudflare D1 so the developer can review them. We do not ask for your name or email. Please avoid including personal information in your message.

Feedback remains available for product support until the developer removes it. Spam protection uses a hashed network identifier in a separate table, not a raw IP address on your feedback. These rate-limit buckets expire hourly and expired buckets are removed when another valid submission arrives.

Analytics

We use Cloudflare Web Analytics, a privacy-first analytics tool. It does not use cookies, does not fingerprint devices, and does not track you across sites. It tells us aggregate things like how many people visited and which pages were loaded.

Advertising

This site is supported by ads served through Google AdSense. Google and its partners may use cookies or similar technologies to serve ads, including personalized ads based on your visits to this and other websites, where permitted.

• You can opt out of personalized advertising at Google Ads Settings.
• Learn more about how Google uses data from partner sites at policies.google.com/technologies/partner-sites.
• Visitors in the EEA/UK will see a consent prompt before any personalized ads are served, as required by law.

What We Don't Do

• We do not ask for accounts, emails, or passwords.
• We do not sell, rent, or share your data with anyone beyond the service providers listed above.
• No cross-site tracking by us; the game contains no social media trackers.

Children

The game is suitable for general audiences and does not knowingly collect personal information from children. Online rooms require only an invented display name.

Third-Party Services

Changes & Contact

If this policy changes, the effective date above will be updated. Questions? Reach out via the about page.