Last updated: 2026-10-20
Who's the Spy? is made by Magmanet. This policy explains what the app does with your information. The short version: your data stays on your device. The app sends anonymous usage statistics, which you can turn off.
Only anonymous usage statistics (see below), which you can turn off. The app has no sign-up, no advertising and no tracking. We never sell or share your data.
The player names you type, your game settings and your custom pack of places are saved only on your device, in the app's private storage. They are removed when you uninstall the app.
The app's Copy backup feature (Settings → Your data) copies this data as text to your clipboard, so you can keep it somewhere you choose. Where you paste it is up to you; the app never uploads it.
The game itself works entirely offline. The only internet requests are the update check and the anonymous usage statistics below. The Android "internet" permission is needed for those and for any network connection, including the direct local-network connection between phones in "Everyone on their own phone" mode.
Once a day the app checks for a newer version by asking the Magmanet server (EU, Contabo). The request contains only the app name, its version number and how it was installed (website/Google Play); the server counts checks per app and version in aggregate and stores no identifiers and no IP address. If the server is unavailable, the app downloads the public version file from GitHub Pages instead (GitHub may see your IP address). If a newer version exists, the app shows a notice and you choose whether to open the download link. You can turn this off in Settings ("Check for updates automatically").
The app sends anonymous usage statistics over HTTPS (a short ping once a day; usage events a few times a day at most, batched) to Magmanet's own server, hosted in the EU (Contabo), not to Google or any other third party. It sends the app name and version, your Android version, your phone's manufacturer and model (such as Samsung SM-S911B; never the name you gave the phone), your language, how the app was installed (Google Play, the website or elsewhere), a random install ID, and anonymous usage events (which screens and features are used and for how long). The random ID is made by the app when it is installed; it is not a device identifier. No personal content is sent: no player names, no places, no custom pack.
On the server the ID is hashed and no IP address is stored. Raw data is deleted after 400 days. It is used only to count active users and improve the app, never for advertising or profiling, and it is never sold or shared.
This is on by default. You can turn it off in Settings ("Share anonymous usage statistics"). Turning it off stops sending immediately and deletes the random ID and any unsent usage events from your phone.
The app asks for a permission only when you use the feature that needs it. You can say no and still use the rest of the app.
When you play with friends nearby, these go directly between the phones in the game, and nowhere else: the display name and emoji avatar you choose, the game options (including your custom pack's places, if the host chose it), and the game state (whose turn it is, votes, guesses, scores).
Your secret card is sent only to your phone: the host phone deals the cards and sends each player's card to that player alone, so other players' phones never receive it. The place is revealed to everyone only at the end of the round. Nothing goes to the internet or to us, and nothing is kept after the game.
The app is a general-audience party game for teens and adults (families can play together). It is not directed at children.
If this policy changes, we'll update the date above and publish the new version at the same address.
Questions? Open an issue at https://github.com/Shauls/magmanet-apps/issues