Super Detective

Privacy

To play, Super Detective asks for no personal details and uses no cookies, and it keeps your progress in your browser. If you buy a pack or turn on the notices of new cases, only what is needed for that is kept.

Who runs it

Super Detective is a free game and a personal project by Pablo (pabloku.dev). For any question, write to hello@pabloku.dev.

What is stored, and where

Your progress, your solved cases and your settings (language and sound) are kept in your browser's local storage. There are no accounts and they are not sent to a server: the anonymous statistics described below only carry a summary in ranges.

You can delete them from the game settings with “Reset progress”, or by clearing this site's data in your browser.

So that the game opens quickly and also offline (for example, if you install it as an app), your browser also keeps a copy of its pages, fonts and icons, with nothing of yours in it, and renews it when there is a new version.

If you buy a pack

The weekly packs are paid for on Stripe's page. They are sold by Link, Stripe's payment service, which acts as the seller: it collects the payment details (your email, your name, your billing address and those of your card or other payment method), sends you the receipt and handles them under its privacy policy. We never see your card details.

To give you what you buy, the shop makes a random identifier for your device, which travels with the payment. Your browser keeps it in two ways: in the game's storage and in a technical cookie (sdd) that is only sent to the shop's addresses and lasts 400 days. The cookie is only created when you buy or recover a pack and it is needed to deliver it, which is why no consent is asked for it (article 22.2 of the Spanish LSSI).

For each purchase, our Cloudflare database keeps the pack, the option, the amount, the date, the device identifier and your recovery code. Your email is not kept: only an encrypted fingerprint (HMAC) used to check that it matches when you ask to recover a purchase. We handle this to deliver what you bought (article 6.1.b of the GDPR) and keep it for as long as the game exists, because what you buy does not expire, and for the periods the law requires.

Notices of new cases

If you turn on the notices (in the game's settings or when you close the last case of the week), your browser asks for your permission and, if you accept, gives us an address of its notification service (Google's, Apple's, Mozilla's or Microsoft's, depending on the browser) with keys to encrypt the messages. We keep it in our Cloudflare database with the game's language and the dates it was added and used, only to send you one notice when you turn them on and another every Monday, when the new cases come out. It is not linked to the statistics or to purchases. We process it with your consent (article 6.1.a GDPR). To write the notices in your language, your browser also keeps the game's language.

You can turn them off at any time in the game's settings or in the notification settings of your browser or phone. If you turn them off in the game, or if the notification service tells us that the address no longer exists, we delete it. Your browser's notification service delivers each message under its own privacy policy.

Hosting

The site is served by Cloudflare. Like any web server, it receives the IP address and other technical details of each visit in order to deliver the page and protect it from abuse. Cloudflare handles them under its privacy policy.

Statistics

To know how many people visit the site, we use Cloudflare Web Analytics, which counts visits in aggregate: page views, country, browser and device type. It uses no cookies and stores nothing in your browser, and Cloudflare states that it does not collect or use visitors' personal data (more information).

The game also sends anonymous statistics about the games to this same site, so we can tell which cases turn out too easy or too hard, what needs improving and whether sharing results works. It sends what happens in the game (that you open, leave or close a case, with its level, its setting, the time, the hints and the wrong accusations; that you share a result, and with which button; that you switch language; that you install the game as an app; that you turn the notices on or off; and the game's errors) together with some general details of the visit: the language of the page and of your browser, whether you use a phone, a tablet or a computer, what kind of site you came from (a search engine, a social network, a shared link…) or whether you opened it from the installed app or from a notice, and whether the music could start by itself.

None of it identifies you: there are no accounts, cookies or identifiers, and nothing new is stored in your browser. To tell newcomers from returning players, the game uses the progress it already keeps and only sends a range (for example, “3 to 5 cases closed” or “played last week”). When the data arrives, Cloudflare works out the country from the IP address, which is also used for a minute to limit abusive sending and is not kept. The statistics are kept in a Cloudflare database that only we can access, and deleted after 13 months.

No third parties

The game loads nothing from other sites apart from Cloudflare's visit counter. The fonts are served from this same domain, and there are no ads.

The buttons to share on social networks are plain links: nothing loads from those networks until you tap one, and then the network you choose opens with the text of your result. The text and the picture are made on your device and are only published where you choose to share them. The link to the game that goes with them says which button shared it (for example, ?ref=whatsapp), for the statistics.

Your rights

You can ask about your data, or ask for it to be deleted, by writing to hello@pabloku.dev. Payment data is handled by Link through its privacy center. If you think your rights are not being respected, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority in your country.

Credits

Fonts: Big Shoulders Display, Crimson Pro, IBM Plex Sans and IBM Plex Mono, under the SIL Open Font License 1.1 (licences).

Last updated: October 1, 2026.