Privacy policy

Last updated: 1 October 2026

We collect as little as possible: only what we need to sell you a play code and run your investigation. No ads, no tracking, no analytics cookies, and we never sell your data.

Who is responsible

Every Suspect Lies is run by Brandur Erhverv, Niels Bohrs Vej 38, 1. 13, 9220 Aalborg Øst, Denmark, CVR 45551040. Email: everysuspectlies@outlook.com.

We are the data controller for the information described below.

What we collect, and why

• Your play code and your game. Your progress is saved under your code: the questions you ask, the characters’ replies, your radio calls, your timeline notes and your final report. We need this to run the game and let you continue later (to fulfil our agreement with you). It is stored in our database in Frankfurt, Germany.
• One cookie, which remembers your play code on your device so you don’t have to type it again. It is strictly necessary for the game, so we don’t ask for consent. Your browser also stores your sound and music settings and which screen you were on; this stays on your device.
• Your IP address, used briefly to stop abuse — for example someone guessing play codes or flooding the game. Our counters forget it within 10 minutes. Our host also keeps short technical logs. (Our legitimate interest in keeping the service safe.)
• Your purchase. When you buy, Stripe handles your payment. We receive your email address, name and order details, so we can email you your code (sent by our email provider, Resend), help if you lose it, and handle refunds. We keep order records for 5 years, as Danish bookkeeping law requires.
• Emails you send us, to answer them.

The AI characters

The suspects and the inspector are played by Claude, an AI made by Anthropic. To produce their replies, the questions and radio messages you type are sent to Anthropic in the USA, together with the story so far. Under its commercial terms, Anthropic does not use this data to train its models. Please don’t type personal information about yourself or anyone else into the game — it’s a story, and the characters don’t need it.

Who else handles your data

We use a few trusted providers, who process data only on our instructions:

• Vercel — hosts the website.
• Upstash — our database (Frankfurt, Germany).
• Anthropic — the AI that plays the characters (USA).
• Stripe — payments. Stripe is also responsible for the payment data it handles itself.
• Resend — sends the email with your play code (USA).
• Microsoft Outlook — our email.

Where data goes to the USA, it is protected by the EU–US Data Privacy Framework or the EU’s standard contractual clauses.

How long we keep it

Your saved game is kept so you can come back to it, and deleted automatically 3 years after your last move in the game — or earlier if you ask us. Purchase records are kept for 5 years (bookkeeping law).

Your rights

You can ask to see the data we have about you, have it corrected or deleted, restrict or object to how we use it, and receive it in a portable format. Email everysuspectlies@outlook.com with your play code or the email you used to buy. If you think we handle your data wrongly, you can complain to the Danish Data Protection Agency, Datatilsynet (datatilsynet.dk).

Age

Our cases are for players aged 13 and over.