1. Who we are
Murder Mystery For 2 ("the Service", "we") is a browser-based detective game operated as an independent project. Contact: hello@murdermysteryfor2.com.
2. What we collect
- Account data (optional): email address, only when you sign in with a magic link.
- Game data: your nickname, scores, completed cases, streaks. Stored to keep your progress and rank you on the daily leaderboard.
- Session data: when you start a live co-op session, we briefly store a session ID, case ID, and game mode in our database. Voice and board sync run peer-to-peer; we never record voice.
- Local data: your browser keeps your in-progress case in localStorage. This stays on your device.
- Logs: standard server logs (IP, user-agent, timestamp) kept up to 30 days for abuse prevention.
3. Analytics
We use Google Analytics 4 to understand how the site is used — pages visited, device type, country. It runs in privacy-respecting mode:
- IPs are anonymized
- Advertising features (ad_storage, ad_personalization) are disabled
- The analytics cookie only loads after you accept the cookie banner
- You can opt out at any time by clicking "Essential only" in the banner, or by clearing your browser's local storage for this domain
4. What we DON'T collect
- No Facebook Pixel, no Hotjar, no TikTok pixel — no marketing trackers
- No advertising IDs and no remarketing
- No voice or video recording — calls go peer-to-peer via WebRTC and are never stored
- No selling of data to third parties — ever
5. Legal basis (GDPR)
- Account email: contract performance (Art. 6(1)(b))
- Game data: legitimate interest in providing the leaderboard (Art. 6(1)(f))
- Optional cookies: explicit consent (Art. 6(1)(a))
6. Third parties
We use:
- Supabase (EU region) — database, auth, real-time. Their privacy policy.
- Google Analytics 4 — site usage statistics, only after your consent. Google's privacy policy.
- Google STUN servers — for WebRTC connection setup only. No personal data is sent.
- Stripe — payment processing for Plus/Studio purchases. Stripe's privacy policy.
- Vercel / Cloudflare (or similar) — static site hosting.
7. Your rights (GDPR)
You have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Delete your data (account + all runs)
- Export your data in a portable format
- Object to processing or restrict it
- Lodge a complaint with your local data protection authority
To exercise these rights, email hello@murdermysteryfor2.com. We respond within 30 days.
8. Children
The Service is not directed at children under 13. We do not knowingly collect data from anyone under 13.
9. Changes
If this policy changes materially, we'll notify signed-in users by email and post a banner on the site for 30 days.