Last updated October 9, 2026.
If you join a party
We store the first name you type, the character you are given and your vote, so the game can run. We do not ask guests for an email address or an account. Your place in the party is remembered on your phone.
If you host a party
- Payment. Stripe handles the payment. Your card details go to Stripe and never reach us. Stripe tells us the email address you used, the amount and the time, so we can email you a receipt with your party code, find your party if you lose the link, and issue refunds. We send that email through our email provider, Resend.
- Invitations. The day, time, place and note a host adds go on an invitation page that only people with its private link can open. Guests who answer it give a first name, which the host and other invited guests can see.
- Gifts. If you buy a gift, we keep your first name, the recipient's first name and email address, your message and the day to send it. We use the recipient's address only to send them the gift and, once they use it, the email with their party code.
- Custom mysteries. The occasion, theme, guest first names and notes you type are sent to our AI provider, the company that makes the AI model we use, to write your mystery. Do not include anything private about your guests.
- Email. If we send you your host link by email, it goes through an email delivery service.
- Reviews. If you post a review after your party, we publish its stars, its words and the first name you give, with the mystery's name and the month. Ask us and we will take it down.
Everyone
- Counts, not profiles. We count visits and actions such as opening a mystery or buying, along with a short tag saying which ad or link brought you. These are daily totals. They are not tied to you.
- Cloudflare hosts the site and processes your IP address to deliver pages.
- Limits against misuse. To stop scripts from flooding the site, we count how many times a day one visitor starts a free party, a checkout or a message. We store a scrambled code made from the IP address, not the address, and delete the counts after a week.
- Old parties. About six months after a party was last used, we move it, with its players' first names and their votes, out of the live game into a private archive. It can no longer be played, but we can bring it back or send the host the story of their party if they ask. Ask us and we will delete it completely. Purchase records are kept for our accounts.
- Google Fonts serves the typefaces, so your browser contacts Google when a page loads.
- Meta Pixel. If we are running ads on Facebook or Instagram, the shop pages load Meta's pixel, which uses cookies to tell Meta that an ad led to a visit or a sale. The pixel is not loaded on the pages where guests join and play.
- If you leave your email address for news of new mysteries or send us a message, we keep it for that purpose only.
Children
Family mysteries are meant to be set up by an adult. Children who join type only a first name. We do not knowingly collect anything else from children.
Your choices
Ask us to delete a party, your purchase record or your email address at any time through the contact page.
Who is responsible
Everyone's a Suspect operates this site.