Legal
Privacy Policy
Last updated: August 17, 2026
This Privacy Policy explains how the operators of GridSpy (“GridSpy,” “we,” “us,” or “our”) collect, use, store, and share information when you use the GridSpy website and progressive web app at www.gridspy.app (the “Service”).
GridSpy is a free, real-time party word game. You do not need an account to play. We designed the Service to keep friction low: a display name, a room code, and a live board with your friends.
By using the Service, you acknowledge this Policy. If you do not agree, please do not use GridSpy. Related rules of use are in our Terms of Service.
1. Who we are
GridSpy is operated from the website www.gridspy.app. For privacy questions or requests, email support@gridspy.app.
2. Information we process
We process the following categories of information:
A. Information you provide
- Display name / callsign — the nickname you enter to join or create a table. It is shown to other players in the same room.
- Gameplay actions — seat choices (team and role), clues, guesses, pass/end-turn actions, rematch requests, and similar in-room activity needed to run the game.
B. Room and game data
- Room codes, board state, turn state, player roster (including a random client-generated player id), clues, and win/loss status for active tables. This data is stored so everyone in the room stays in sync.
C. Information stored on your device
- A random player id in local storage so you can rejoin the same seat identity in a browser session.
- Your last display name, recent room codes, and whether you dismissed the “install app” hint (local storage).
- Optional service worker / cache data if you use GridSpy as an installed progressive web app, so the shell of the site can load faster. Gameplay still requires a network connection.
D. Automatically collected technical data
- Standard server and hosting logs may include IP address, browser type, device type, approximate location derived from IP, referring URL, and timestamps. Our hosting and infrastructure providers process this as part of delivering the Service.
- If Google Analytics is enabled, we receive aggregated and event-level usage data (for example page views and gameplay events such as creating a room, joining, seating, starting, clue/guess actions, rematch, leave, share, and install prompts). Google may set cookies or similar identifiers on your device as described in Google’s policies.
We do not require email addresses, phone numbers, payment details, or government IDs to play. We do not intentionally collect precise GPS location.
3. How we use information
- Operate multiplayer rooms and keep players synchronized.
- Remember your callsign and recent tables on your device.
- Measure and improve the Service (reliability, features, and content), including via analytics when enabled.
- Secure the Service, prevent abuse, debug issues, and comply with law.
- Show optional sponsor placements you may choose to click; clicks may be counted for analytics.
We do not sell your personal information. We do not use room chat-style profiles beyond what is needed to play a shared table.
4. Legal bases (where applicable)
If you are in a region that requires a legal basis for processing (such as the EEA/UK), we rely on: performance of a contract / providing the Service you request (running your game); legitimate interests (keeping the Service secure, understanding aggregate usage, improving the product); and consent where required for non-essential cookies or similar technologies (for example certain analytics cookies), which you may manage through your browser settings.
5. Sharing and processors
We share information with service providers who help us run GridSpy, under contracts that limit use to providing their services:
- Hosting / edge delivery — currently Vercel or similar hosting for the website.
- Database and realtime — Supabase (PostgreSQL and realtime sync) for room and game state.
- Analytics — Google Analytics (Google LLC) when a measurement ID is configured.
Other players in your room can see your display name, seat, and public gameplay actions. Anyone with your room link or code can attempt to join that table while it exists.
If we display a sponsor, clicking their link sends you to a third- party site with its own privacy practices. We are not responsible for those sites.
We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets related to the Service (in which case we will aim to keep protections consistent with this Policy).
6. Retention
- Active rooms remain while players use them. We periodically delete stale rooms: finished games idle for about 12 hours, and any room idle for about 72 hours, subject to operational changes.
- Device storage (player id, name, recent rooms, install dismiss) stays until you clear site data in your browser or uninstall the PWA.
- Analytics and logs are kept according to our providers’ retention settings and our need to operate and secure the Service.
7. International transfers
GridSpy is offered globally over the internet. Information may be processed in the United States and other countries where our providers operate. Those countries may have different data- protection laws than your own. Where required, we rely on appropriate transfer mechanisms offered by our providers.
8. Your choices and rights
- Clear local site data or use a private window to remove device- stored name, player id, and recent rooms.
- Block or delete cookies via your browser; note that blocking all cookies may affect some third-party features.
- Use browser or OS controls related to tracking / “Do Not Track” as available; our analytics vendor’s tools may also offer opt- outs (see Google’s documentation for Google Analytics).
- Leave a room or stop using the Service at any time.
Depending on where you live, you may have rights to access, correct, delete, or restrict certain personal data, or to object to certain processing, and to lodge a complaint with a supervisory authority. Because we do not run user accounts, we may need enough information to locate relevant records (for example a room code and approximate time). Contact support@gridspy.app.
9. Children
GridSpy is a general-audience party game and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.
10. Security
We use reasonable technical and organizational measures appropriate to a free browser game (HTTPS, access controls at our providers, and least-privilege database policies where applicable). No method of transmission or storage is 100% secure. Do not share room codes with people you do not want at your table.
11. Changes
We may update this Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use of the Service after changes means you accept the updated Policy, to the extent permitted by law.
12. Contact
Privacy questions and requests: support@gridspy.app
Website: www.gridspy.app