Private by role.
Clear by design.

What we keep

Your display name, your games and moves, and an email address if you choose email sign-in. A session cookie remembers your seat. Your browser may also remember sound preferences and an invitation while you join.

Games and account records are hosted on Cloudflare. Request limits use a hashed identifier derived from your account or network address to keep shared resources available. We don’t use advertising trackers.

What your teammate can see

Personal assistants connect through a private link scoped to one seat in one game. The game stores a hash of the connection secret. A clue giver receives the secret key; a guesser receives only public information. Connections expire after seven days and can be replaced from teammate settings.

Spy Master does not connect to your email, messages, files, or other personal sources. If you ask your own assistant to use context it already knows, that happens in your assistant’s environment and is subject to that service’s controls. Public clues, names, and guesses are visible to the other players at your table, so avoid putting sensitive information in them.

Hosted teammates

Hosted AI runs through Cloudflare Workers AI. We send the board information needed for the current role and the public game clues. Guesser models never receive hidden assignments. Your email address and sign-in or connection secrets are not part of these prompts.

Keeping access

Email sign-in links work once and expire after ten minutes. Guest games are tied to the browser session; clearing its cookies can remove your access. Signing in from that browser links those games to your account. Signing out ends the current session.

The app does not currently offer automatic game or account deletion. Keep sensitive information out of table names and clues.