Privacy Policy

Sleuth the Truth is a free game by Ben Brady. This policy explains what data is collected when you play and how it's handled. The short version: we collect minimal data to keep the game running and don't sell it to anyone.

Prompts & questions. The prompts you use to create boards and the questions you ask during gameplay are sent to our servers and forwarded to third-party AI providers (currently via OpenRouter) to generate responses. These may be logged for debugging, abuse prevention, and improving the game.

Game sessions. Board configurations, secret cards, guess history, and answer results are stored on our servers to power gameplay, puzzles, and the daily leaderboard.

First-party analytics. We collect first-party product analytics to understand how the game is used and where people get stuck. Events include page views, board loads, gameplay actions such as questions, clue reveals, card views, shortlist/elimination actions, guesses, wins, give-ups, shares, replay starts, and privacy-safe OpenRouter usage metadata (operation, model, provider, latency, token counts, cache usage, and cost). We do not store prompts, questions, answers, or generated text in these analytics events.

Local storage. Game history, daily streaks, theme and AI model preferences, eliminated-card state, and a random analytics visitor ID are stored in your browser's localStorage. These records remain on your device, although your selected AI model is sent with questions so we can honor the preference.

No accounts. Sleuth the Truth does not require registration. We don't collect names, emails, or passwords.

Cloudflare. The game is hosted on Cloudflare Workers. Cloudflare may process standard web request data (IP addresses, headers) per their privacy policy.

OpenRouter / AI providers. Your questions and board prompts are sent to AI models via OpenRouter to generate answers and board content. See OpenRouter's privacy policy.

Analytics storage. First-party analytics events are stored in a Cloudflare R2 bucket operated by Sleuth the Truth. Browser events may include page paths, a random visitor ID, a per-page session ID, the landing referrer, UTM campaign fields, request country, and user-agent data.

Wikipedia. Board images and summaries are fetched from the Wikimedia API. No user data is sent to Wikipedia.

Sleuth the Truth does not use analytics cookies. If you sign in, authentication uses cookies; other client-side state and the random analytics visitor ID are stored in localStorage.

The game is designed to be family-friendly. We do not knowingly collect personal information from children. Since no accounts or personal data are required, children can play without providing identifying information.

Server-side game session data is retained as long as needed for gameplay and analytics. First-party analytics events are retained in Cloudflare R2 until they are rotated or deleted. Question/answer logs may be periodically purged. You can clear local game state and the analytics visitor ID by clearing your browser's localStorage for this site.

Since we don't collect personal identifiers, there's typically no personal data to request or delete. If you believe we hold data about you and want it removed, get in touch via the contact details below.

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the game constitutes acceptance of any changes.

Questions or concerns about this policy? Reach out:

contact@sleuththetruth.com