Legal

Legal information about Spypher and how we handle your data.

Privacy Policy

Last updated: November 2026

Overview

Spypher is designed to collect as little data as possible. You can play without creating an account.

Who operates Spypher

Spypher is operated by Clifton House Consulting Limited, a company registered in England and Wales under company number 12506901, with its registered office at Monterey, Rowly Drive, Cranleigh, England, GU6 8PL.

For privacy enquiries, including requests about your rights and complaints about how we handle your data, email privacy@spypher.co.uk or write to us at our registered office. For anything else, email hello@spypher.co.uk.

What data is used

Game data on your device - your scores, found words, streak, game progress, Debrief progress, a record of your recent games and your settings such as sound and theme are saved in your browser's local storage. This data stays on your device and is not sent to us, except for a short summary of your game that is included if you choose to send feedback.

Basic server logs - our hosting provider may create standard server logs when you access Spypher. These may include your IP address, browser type, device information, date and time of access, and pages requested. We use this data only to keep the game secure, reliable and working properly.

Analytics data - we use Umami to collect data about how players interact with Spypher. This helps us understand how the game is used and improve it over time. Details are set out in the Analytics section below.

Feedback - what you choose to send us through the feedback form. Details are set out in the Feedback section below.

Analytics

We use Umami, a privacy-first product analytics service, to understand how players interact with Spypher. Umami is designed to collect no personal data. It does not set cookies, does not use fingerprinting and does not store IP addresses.

Umami may collect the following information during your session:

Pages visited within Spypher
Referring website or source
Browser type, operating system and device type
Country derived from your IP address at the point of the request - your IP address itself is not stored
Game interaction events including puzzle mode, score, rank, answer and bonus words found, completion percentage, longest word length, puzzle number, puzzle date and how you chose to share a result
Feedback form events: when the form is shown, opened, sent or fails to send, with a general reason for a failure. Feedback text and email addresses are never sent to analytics.

No information that identifies you personally is collected or stored. Umami does not use cookies or a persistent identifier. To count unique visitors, it combines your IP address and browser details with a value that changes regularly, at least once a month, and keeps only the resulting code. Visits within the same period can therefore be counted together, but you cannot be recognised once the value has changed.

This data is processed by Umami on our behalf. We use Umami Cloud with data stored in the European Union.

We rely on legitimate interests as our lawful basis for this analytics processing. We have assessed that understanding how the game is used is proportionate to the privacy impact, given that Spypher is a free service with no advertising, no account requirement, no personal data stored by our analytics and no use of cookies or fingerprinting. Umami is configured to minimise data collection consistent with that assessment.

We do not use analytics data for advertising, profiling or automated decision-making.

Umami's privacy policy is available at umami.is/privacy.

Feedback

You can send us feedback about Spypher at any time. It's optional, and we only receive feedback when you choose to send it.

We collect what you tell us, your email address if you'd like a reply, and some basic information about your game and device. This helps us understand what's working, investigate problems and make Spypher better.

We don't collect the actual words you've found, create a permanent player ID or use your email address for marketing.

Feedback is handled by our hosting and email providers, including some processing in the United States. We keep feedback for up to 12 months and use it only to improve Spypher or respond to you. Our lawful basis is legitimate interests.

If you'd like us to delete your feedback, email privacy@spypher.co.uk with your feedback reference or the email address you provided.

Cookies and tracking

Spypher does not use advertising cookies or tracking cookies. Our analytics provider Umami does not set cookies and does not use fingerprinting or persistent identifiers. Our hosting provider may set technically necessary cookies required to serve the site. We do not use cookies for advertising or for tracking you across other websites.

Sharing data

We do not sell your data. We do not share personal data for marketing purposes.

We share analytics usage data with Umami, our analytics provider, who processes it on our behalf under a data processing agreement. Server log data may be processed by our hosting provider as necessary to operate and secure the service.

Feedback you send is processed on our behalf by our hosting provider and our email provider, as described in the Feedback section above.

How long data is kept

Game data stored in your browser remains on your device until you clear it.

Server logs are kept for 90 days, unless retention is required for security, legal or operational reasons.

Analytics data collected by Umami is retained for 6 months before deletion. This reflects our current Umami plan configuration and will be updated here if it changes.

Feedback you send is kept for up to 12 months and then deleted.

Children

Spypher is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. We have configured our analytics to minimise data collection, consistent with our obligations under UK data protection law relating to younger users. If you believe a child under 13 has submitted personal data to us, please email privacy@spypher.co.uk or write to us at our registered office (see "Who operates Spypher" above) and we will take prompt steps to address it. We encourage users under 18 to play with the knowledge of a parent or guardian.

Future account features

We intend to introduce optional user accounts in a future update. When that feature launches, this Privacy Policy will be updated before release and you will be asked to actively consent to any new data collection at that point. The game will remain playable without an account.

Your rights

Under UK data protection law, you may have rights including the right to access, correct or delete personal data held about you. Because Spypher currently has no accounts and uses cookieless analytics, we may not be able to identify data relating to you unless you provide sufficient information for us to do so. For feedback, quote the reference shown after you sent it, or the email address you gave. To make a request or a complaint, email privacy@spypher.co.uk or write to us at our registered office address above. You can also make a complaint to the Information Commissioner's Office at ico.org.uk.

Changes

We may update this Privacy Policy from time to time. The latest version will always be shown on this page.

Terms of Use

Last updated: October 2026

1. Who we are

2. Using Spypher

By using Spypher, you agree to these terms. Spypher is intended for users aged 13 and over. By using the game, you confirm that you are at least 13 years old.

3. The game

Spypher is provided free of charge. We may change, pause or withdraw any part of the game at any time. We do not guarantee that Spypher will always be available or error-free, or that any score, result or game state will always be saved.

Your streak is calculated from game data stored in your browser's local storage. If you clear your browser data, reinstall your browser or switch devices, your streak may be lost. We do not back up streak data and cannot restore it.

We use analytics tools to understand how the game is used. This is described in our Privacy Policy.

4. Fair play

You must not use bots, scripts or automated tools to play. You must not tamper with scoring or game data. You must not attempt to reverse-engineer the game. You must not use Spypher unlawfully or in any way that is harmful to others.

Spypher is intended for entertainment only. The share feature is informal and social in nature. You must not use Spypher, its scores, ranks, streaks or results for wagering, betting or gambling of any kind.

5. Sharing your results

Spypher lets you share your game results through third-party platforms such as WhatsApp and X, or your device's own share options. Sharing only happens when you choose to use the share feature.

Shared content may include your rank, your score (Practice only), the number of answer words found, your streak and the puzzle number. We are not responsible for the policies, practices or content handling of any third-party platform you choose to share to.

6. Intellectual property

Spypher - including its name, branding, design, code, text and game content - belongs to us or our licensors. You may play the game for personal, non-commercial use. You must not copy, modify, distribute or commercially exploit any part of Spypher without our written permission.

7. Liability

Spypher is a casual game provided on an as-is basis. To the fullest extent permitted by law, we are not responsible for any indirect or consequential loss arising from your use of Spypher. Nothing in these terms limits our liability for death or personal injury caused by our negligence, or for fraud or fraudulent misrepresentation, or for any other matter that cannot lawfully be excluded or limited.

8. Law

These terms are governed by the laws of England and Wales. The courts of England and Wales will have exclusive jurisdiction over any dispute arising from these terms or your use of Spypher.

9. Changes

We may update these terms from time to time. The latest version will always be shown on this page.

Back to game