Last updated: 30 August 2026.
Who processes your data
The data controller is Suspekto, whom you can contact at info@suspekto.com for any question about this policy, to exercise your rights or to ask for the full details of the controller.
What data we collect
Data you give us
- Username and display name, which the other players see.
- Email address, used only to confirm your registration and to recover your password. It is not visible to the other players and we do not use it to send you advertising.
- Password, which we do not keep in clear text: we only store a one-way cryptographic transformation of it.
- Profile picture and motto, if you choose to upload them. They are visible to the other players.
Data generated by the game
- Messages from the public and private chats of the game, the event log, votes and actions.
- Game statistics, score, trophies, coins and cosmetics.
- Results of ranked games, kept for the leaderboard and for the player's history.
Technical data
- IP address, recorded by the web server and used to limit abuse and excessive requests.
- Device identifier for notifications, stored only if you turn push notifications on.
- Data stored in your browser: the token that keeps you signed in and a few preferences such as the language and the open tab. They stay on your device and you remove them by clearing the site data.
Why we process it
| Purpose | Legal basis |
|---|---|
| Creating your account and letting you play | Performance of the contract, that is the service you asked for |
| Recovering your password and confirming your email address | Performance of the contract |
| Preventing abuse, cheating and overload of the service | Legitimate interest in the security of the service |
| Sending you push notifications about your turn | Your consent, given to the operating system and revoked from its settings |
| Showing advertising | Your consent, collected by the banner on your first visit |
Advertising
The game is free and is funded by advertising. The ads are provided by Google, which for this activity acts as an independent controller: it may use cookies and identifiers of your device to show you ads and to measure how they perform. On your first visit we ask for your consent through a certified banner: you can accept, refuse or choose non-personalised ads, and you can change your mind at any time from the link at the bottom of the page.
Watching an ad to get coins is always your choice: the game works completely without doing it. Google's own policies are at policies.google.com.
Who we share data with
We do not sell your data and we do not hand it over for commercial purposes. It is processed for us only by:
- Google Firebase, to deliver push notifications to your device.
- Google AdSense, for the ads, under the conditions described above.
- The mail service that sends the confirmation and password recovery emails.
The other players see your username, your display name, your profile picture, your motto, the cosmetics you wear, your public statistics and whatever you write in the chats.
The providers mentioned above may also process your data outside the European Union, on the basis of the safeguards provided for by the regulation, for example the standard contractual clauses approved by the European Commission.
How long we keep it
- Account and statistics: as long as the account exists.
- Chats and event log of a game: for the duration of the game. When the game closes they are deleted.
- Finished ranked games: kept indefinitely with role, outcome and names of the participants, because they are the history of the game and the basis of the leaderboard.
- Email confirmation and password recovery tokens: 24 hours.
- Sign-in token in your browser: 90 days, then you sign in again.
- Web server logs with the IP address: as long as security requires.
Your rights
You can ask to access your data, to correct it, to delete it, to restrict its processing, to receive it in a readable format and to object to the processing based on legitimate interest. Display name, picture, motto and password you change yourself in the game settings.
To delete your account write to info@suspekto.com from the address you registered with: we remove the account, the statistics and the trophies. In games that are already archived your username may remain, because it is part of the result of a game played with other people.
If you believe the processing does not comply with the rules you can turn to the Italian data protection authority, garanteprivacy.it.
Minors
The game is not meant for anyone under 14 years old. If we find the account of someone younger we close it. We do not show personalised ads to minors.
Security
Connections are encrypted, passwords are stored only in transformed form and access to the server is restricted. No measure is perfect: should a breach happen that poses a risk to you, we will inform you as the regulation requires.
Changes
If we change this policy we will update the date at the top of the page. If the changes are significant we will say so inside the game.