Privacy policy

Data controller

Email: hello@thesuspects.party

What information we process

When you create a murder mystery:

• What you write in the form: your first name, your guests' first names, the fun details you write about them and your wishes for the game.
• Your email address and payment status, which we receive from Stripe when you pay.
• A hash value of your IP address, so we can limit misuse of the free drafts. We do not store the IP address itself.
• Which ad or campaign you came from, if the link contained that kind of information (UTM parameters).
• If you use the party guarantee: the time and the reason you write yourself.

We never see your card details. Stripe processes them.

Are you a guest?

The host has written your first name and perhaps a fun detail about you, so you could get a role in the game. We also record when you first open your link and who you vote for at the end. We only use this to run the game. The legal basis is the host's and our legitimate interest in running the game at the party (Article 6(1)(f) of the General Data Protection Regulation, GDPR). The information is deleted together with the game. Write to us if you want it deleted sooner.

Why, and on what legal basis

• To deliver the murder mystery you have ordered (contract, Article 6(1)(b)).
• To prevent misuse and measure which ads work (legitimate interest, Article 6(1)(f)).
• To comply with bogføringsloven (the Danish Bookkeeping Act) once you have paid (legal obligation, Article 6(1)(c)).

Who we share information with

We use these suppliers to run the service:

• Cloudflare (running the website).
• Supabase (database, located in the EU).
• Anthropic (the artificial intelligence that writes the murder mystery). The text from the form is sent to Anthropic, which processes it on our behalf as a data processor.
• Stripe (payment). Stripe is an independent data controller for payment information.

Some of the suppliers are American. Data is transferred on the basis of the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep the information

• Drafts that are not bought are deleted after 30 days.
• We keep purchased games for 12 months so you can find the game again. After that, we delete the content.
• We keep information about payments for five years from the end of the financial year, in accordance with bogføringsloven.

You can always ask us to delete your order sooner.

Cookies and local storage

We do not use cookies. Your browser only stores your own information locally, so you can find it again: what you have written in the form so far, links to your games and your notes as a guest. It stays on your device and is not sent to us.

Your rights

You have the right to access the information we hold about you and to have it corrected or deleted. You can also object to the processing and ask to have your information handed over to you. Write to hello@thesuspects.party.

You can complain to Datatilsynet (the Danish Data Protection Agency) at datatilsynet.dk.