Legal

Privacy — Large Language Murder.

This game has no accounts, asks for no names, and collects nothing about you — if you subscribe or buy a day pass, our server keeps a count of how many AI requests that purchase has used, and nothing else about you; the free HIDE games are counted on your own device. There is no advertising, no analytics and no tracking of any kind, in any mode. It ships with everything that could use the network switched off, and it is a complete game that way. Three things can turn a connection on, you choose each one, and each is set out below.

Last updated 19 September 2026

Which app this policy covers

This page covers one app, and only one. Our other mobile games — which collect nothing and never open a network connection — are covered separately at privacy for our mobile games.

• Large Language Murder com.hauntedspacehotel.large_language_murder A pass-and-play party game for one device and a table of people. Not a children's title.

The short version — three switches

Out of the box this game opens no connection at all. Each of the three things below is off until you turn it on, each is independent of the other two, and the game is complete with none of them.

What we collect

Nothing about you. There is no account, no sign-in, no profile, no advertising and no analytics. If you subscribe or buy a day pass, our server keeps the handful of records set out in full in section 1 — which purchase paid, and how much of it has been used — and nothing that says who you are. Specifically, this app does not ask for, access, collect, store or transmit to us:

• Email addresses, phone numbers or postal addresses
• Location of any kind, precise or approximate
• Contacts, calendar, photos, files, microphone or camera
• Advertising IDs, device identifiers or any other tracking identifier
• Usage analytics, gameplay telemetry, crash reporting of our own, heat maps or session recordings
• Cookies, web beacons or cross-app profiles

We run two pieces of server infrastructure for this game, both at manager.hauntedspacehotel.com. One is a relay, so that people who are not in the same room can play together: it forwards messages between your devices without reading them and keeps nothing. The other is the AI server, which is only ever used if you subscribe, buy a day pass or play one of the free HIDE games: it passes a round's request to the AI on our key and counts it against your monthly allowance, your day pass's, or that free game's. A key of your own or your own Ollama never touches it. Both are described in full further down, because a promise about a server is worth more when the server is named.

1 · The live AI — what leaves the device, and exactly when

The game asks you to type your name once per game, for the card that says whose turn it is. That name stays on the device. It is not sent anywhere, in any mode, and this is structural rather than a policy we are keeping to — every seat that appears in a request to the AI is written by a piece of code that produces PLAYER THREE and cannot see the list of names at all.

You choose the model, and each is made by one of four companies: Anthropic, Google, xAI or OpenAI — or, if you set up an Ollama of your own, it is whatever model you run there. The app names the model and its maker on the screen where you pick it, and again before a game that will send anything.

If — and only if — the live AI is switched on, and you have subscribed, hold a day pass that covers that model, are using a key of your own or your own Ollama, or are playing one of the free HIDE games, the app sends requests for that model each round, of at most three kinds:

• The AI's own answers — carrying the one-word prompt, and the answers, authors and votes from rounds already revealed to the table, so it can play like somebody who has been sitting there. Each seat is named PLAYER ONE, PLAYER TWO and so on.
• One line for the score card — sent after the round is already scored, carrying the same round's cards.
• In HIDE only, one verdict request per AI juror — each carrying the prompt word and the cards on the board, so that juror can decide which one it thinks the human wrote.

In PEEK, the round in progress goes too — but only in SEEK, where the AI is the one being hunted and therefore the one that gets to read the table. In HIDE it is you who reads, and the jurors are sent nothing extra at all. Whichever it is, the mode is chosen on the title screen, in front of everybody, before a game starts.

Nothing else goes with it. No name, no account, no device identifier, no advertising ID, no location, no contacts, and nothing that persists between games.

One honest caveat, and we would rather write it down than sound cleverer than we are. An answer is free text — up to six words of six letters, typed by a person. We do not attach a name to it and we never ask for one, but we cannot promise nobody will ever type something that identifies somebody at that table. What we can promise is what the app does with it: it goes to the model you picked to produce one line of text, and we keep none of it — on your own key or your own Ollama it never passes us at all, and otherwise it passes through our server without being stored.

If you subscribe, buy a day pass, or play a free HIDE game — our server, and what it keeps

A subscription means you do not need a key of your own: the request goes from your device to our AI server at manager.hauntedspacehotel.com, which sends it on, on our key, through OpenRouter to the company that makes the model you picked, and returns the answer. Your device proves the subscription with an identifier the app store gives it, and our server asks Apple or Google whether that subscription is active.

The free HIDE games take the same route, without a subscription and without any identifier at all. Each new install gets three; your device counts them itself, and our server never learns which device is asking. Each free game is issued a random number of its own, made up for that game and never reused, which the server uses to count that game's requests. The free games are played on Google's Gemini 2.5 Flash model, whichever model you have picked.

A day pass takes the same route too — 24 hours of the live AI, on any of the models a pass covers, and you can change which one as often as you like. To redeem it, the app sends our server the store's identifier for that one purchase and the model you are starting on; our server asks Apple or Google to confirm the purchase and, on Google Play, acknowledges it with Google. The first redemption starts the 24 hours, so a pass waiting to be used is not running down. A pass that arrives from a store promo or offer code is redeemed exactly the same way, with exactly the same data.

What our server stores, in full:

• Which subscription paid — the store's identifier for it, which is not your name, not your email and not your store account; the plan; and when it expires.
• How many AI requests that subscription has used this month — one number, so the monthly allowance can be counted.
• For each finished game, four numbers — which prompt word, which AI model, whether the human won, and the date. Nothing links them to a subscription or to anybody.
• For the free HIDE games — how many were given out each day and each month, and for each free game a count of its requests under that game's random number, deleted after two months.
• For each day pass — the store's identifier for that one purchase, which is not your name, not your email and not your store account; whether it came from Apple or Google; which product it was; the model you started on; how much of its allowance is left and how much has been used; and when it started and when it ends. Nothing joins one pass to another, even two bought by the same person. The record is deleted about 60 days after the pass ends.

What it does not store: the words anyone wrote, the cards, the names you typed, your IP address, your location, any device identifier or any account. Our server sees the answers as they pass through, because that is what is being sent; it keeps counts, never content. Access logging is switched off on it, and it is never told your IP address.

To stop a script from using up the free games meant for people, the web server in front of our AI server limits how often one internet address can start a free game. It holds that count in memory for a few minutes and then forgets it; it is never written down, never logged, and never passed on to the AI server, which is not told your IP address at all.

If you use your own key or your own Ollama, none of this section applies to those requests: they go straight from your device to whoever issued the key, or to the Ollama address you gave, and our server is not involved.

A key of your own

This app ships no API key of its own, and our server's key is never sent to your device. If you use a key of your own — from your own Anthropic or OpenRouter account — it is written to the app's private storage on the device, it is sent to nobody but the company that issued it — an Anthropic key to Anthropic, an OpenRouter key to OpenRouter, which passes the request to the model's maker — and it never reaches us. Requests made on it are not counted by us. Delete the key, or uninstall the app, and the game goes back to using our server or to its written answers.

Your own Ollama

With the ENGINEER plan you can instead point the game at an Ollama of your own: a computer on your own network that runs it, or an https address — usually Ollama's own cloud at ollama.com, with an Ollama key of your own. You type in the address and the name of the model. The round's requests — the same ones described above — then go directly from your device to that address, and nowhere else: they never pass through our server, and we neither count nor keep anything about them. Plain, unencrypted http is accepted only for an address on your own device or your own local network.

The address, the model name and the Ollama key, if you add one, are stored on the device only, and the key is sent to nobody but the address you entered. On a computer of your own, what happens to a request is up to that computer. On Ollama's cloud, Ollama receives the requests under your own account and its own policy.

2 · Playing with other people — two wires, and only one of them is ours

Everybody can play on their own phone instead of passing one device round. There are two ways to connect and the game asks you which, in those words, before it opens anything.

On the same Wi-Fi — no server, ours or anybody's

One device hosts and the others find it on the same network. That traffic goes device to device: it does not leave your network, it reaches no third party, and no server is involved at all — it works with the broadband unplugged. It carries the seats, the answers and the votes for the game in progress, and nothing else. It is not encrypted, because it is a party game talking to the phone next to it on your own Wi-Fi, and we would rather say that than imply otherwise.

Over the internet — a relay we run, that keeps nothing

If the people you are playing with are somewhere else, the host can open the game over the internet instead. The device that hosts and the devices that join each make an encrypted connection to manager.hauntedspacehotel.com, a server we operate, and it passes messages between them. The four letters on the host's screen are the address of that room and the only thing anybody types.

What the relay is, precisely:

• It does not understand the game. It has no idea what a player, a round, a prompt or a score is. It forwards whatever it is given to the other devices in the same room, untouched.
• It stores nothing and logs nothing. There is no database, no account, no history and no record of who connected or what was passed through. Access logging is switched off on that server, and errors are recorded by error code, never by content.
• A room lasts exactly as long as the host's connection. When the host leaves, the room is gone and the code means nothing again.
• Traffic is encrypted between each device and the relay (TLS, over the same port a browser uses).
• There is no list of games to browse and no way to be found. A room is reachable only by somebody you gave four letters to. We publish nothing about any player, ever, and we are not going to.

⚠ Two ordinary internet facts we would rather state than leave implied. Like every internet service, the relay and the content-delivery provider in front of it (Cloudflare) necessarily handle the connection itself — which means your device's IP address is visible to them for as long as you are connected, in the same way it is to any website you open. We do not use it for anything, we do not keep it, and it is not joined to anything else, because there is nothing else. And the relay is only ever running when you chose the internet option: pick same Wi-Fi, or play on one device, and no part of this section happens at all.

3 · What you can buy

The game is free. Everything you can buy is optional, there is no in-game currency, and each purchase differs only in what, if anything, our server has to know about it:

• A subscription — a live AI through our server, counted each month against its allowance. Our server keeps the store's identifier for it and its monthly count, as set out in section 1.
• A day pass — 24 hours of the live AI, through our server, on any of the models a pass covers. Our server keeps the record for that one purchase set out in section 1.
• The ENGINEER plan, monthly or one-time — hosting and every word group, and the ability to use a key of your own or your own Ollama. It includes no AI from us, and nothing about it is sent to our AI server.

The transaction is never ours. On Android it runs through Google Play Billing, in the Play app on your device; on iPhone, iPad and Mac it runs through Apple's In-App Purchase, in the App Store. We never see and never receive your name, your email address, your card details or your Google or Apple account — the store answers the app with nothing more than whether this device has bought it. For a subscription our server also asks the store, using the identifier described in section 1, whether it is active and when it expires; for a day pass it asks whether the purchase is real and, on Google Play, acknowledges it; and nothing more. Their handling of the payment is covered by the Google Privacy Policy and Apple's Privacy Policy. There is no advertising in this app, of any kind, and there never will be.

What is kept on the device

A few small files, in the app's own private storage, which no other app can read and none of which is backed up to us:

• Your settings — a handful of numbers: narrator voice on or off, live AI on or off, which mode, how many AI opponents, which decks of prompts, which model, and which way it is paid for. That is the entire file.
• Your API keys, if you pasted any in — one file for an Anthropic key, one for an OpenRouter key.
• Your own Ollama, if you set one up — its address and the model name in one file, and your Ollama key, if you added one, in another.
• Your day passes, if you have bought any — for each one, the model you started on, when it ends, how much of it is left, the store's identifier for the purchase, and a token for our server that stops working when the pass ends. A pass whose day is over is no longer read, and is dropped the next time the file is written.
• How many of the three free HIDE games this install has played — one number, 0 to 3.
• What this device has bought — a small copy of the store's answer, so a purchase still works when you are offline.

There is no save game, no history, no scoreboard and no record of who played or what anybody wrote. The AI's memory of the evening lasts exactly as long as the game does. Uninstalling the app, or clearing its data in Android's settings, removes all of these files completely.

AI-generated content, declared on purpose

This game is about an artificial intelligence and a great deal of it was written by one. We are saying so deliberately, and it applies to the offline build as much as the online one:

• The prompt words are AI-generated.
• The answers the AI plays when it is not connected are AI-written, and they ship inside the app.
• The title lettering, the app icon and the store artwork are cut from AI-generated images.
• When the live AI is on, the AI's answer for the round is written live.

Whatever the AI writes is held to the same rule every player is: one to six words, each at most six letters, letters only, checked by the game's own rules engine before it can reach the table. A reply that fails is thrown away and a pre-written line is used instead, so nothing you see on a card is unchecked model output.

This is the one game we make that is built this way, and it is the one game where it is the point. Every other title from this studio is signed 100% Designed by Humans, and that stays true.

Third parties

• The maker of the model you pick — and only while the live AI is on. They process the request that produces the AI's answer, under their own policy: Anthropic, Google, xAI or OpenAI. Only the one whose model you picked is involved, none of them is involved on your own Ollama, and with the live AI off no request is ever made.
• OpenRouter — if you subscribe, buy a day pass, play a free HIDE game, or use an OpenRouter key of your own. It passes the request to the model's maker, under OpenRouter's privacy policy. Through our server they receive the request from us, never from your device, and are never given your IP address; on your own OpenRouter key your device talks to them directly.
• Ollama — only if you point the game at Ollama's cloud, with an Ollama key of your own. Your device talks to them directly, under your own account and Ollama's privacy policy, and we are not involved. An Ollama on a computer of your own is not a third party at all.
• Cloudflare — and only if you host or join a game over the internet, subscribe, buy a day pass, or play a free HIDE game. They sit in front of our servers and handle the connection, under Cloudflare's privacy policy. On the same Wi-Fi, or on one device, they are not involved.
• Google Play — for distribution on Android, and for the optional purchases there. Google gives us aggregate, anonymised console statistics: install counts, ratings, anonymous crash reports. We cannot identify anyone from them and we have asked for nothing more.
• Apple — for distribution on iPhone, iPad and Mac, and for the optional purchases there. Apple gives us the same shape of thing: aggregate, anonymised App Store Connect statistics. We cannot identify anyone from them and we have asked for nothing more.

There are no ad networks, no analytics providers, no social logins, no crash-reporting SDKs of ours and no other cloud services in this app.

Permissions

The Android build declares the following. None of them gives access to anything about you, and all but the last are normal permissions, which Android grants without a prompt:

• INTERNET — the live AI when you have subscribed, hold a day pass, use a key of your own or your own Ollama, or are playing a free HIDE game, and playing over the internet if you choose it.
• CHANGE_WIFI_MULTICAST_STATE — so a phone can find the host on your own Wi-Fi when you play across devices.
• WAKE_LOCK — keeps the Wi-Fi awake while this device is hosting a game on your own Wi-Fi, so the others can join; released when hosting stops.
• ACCESS_NETWORK_STATE — used by Google's billing library to tell whether the device is online.
• com.android.vending.BILLING — so the app can ask Google Play about your purchases.
• ACCESS_LOCAL_NETWORK — only Android 17 and later ask for this, and only when you host or join on the same Wi-Fi, never at launch. Say no and discovery on your Wi-Fi goes quiet; typing an address or a room code still works.

The game requests no other permission at all: no location, no storage, no contacts, no camera, no microphone and no advertising ID. The narrator voice needs none — Android's text-to-speech runs on the device.

Children

This is not a children's title and is not in Google Play Families. It is intended for players aged 13 and over. It is a party game in which people write things and an AI writes things back, and unlike our other mobile games we are not going to claim it is suitable for a small child.

Third-party licences

This game is built on other people's work as well as ours. The notices that work is owed are listed on our third-party licences page, ship as a text file beside the desktop build, and are in the app itself under Settings → Notices.

Your rights

Data-protection law gives you the right to access, correct, export or delete the personal data a company holds about you. We hold nothing that identifies you — there is no account and nothing is kept on the relay. If you subscribe, our server holds the store's identifier for your subscription and its monthly count; if you buy a day pass, it holds that pass's record until about 60 days after it ends — both as set out in section 1. Write to us and we will delete them. To remove what is on the device, delete a key in the app, or uninstall it, or clear its data in Android's settings. If you want to ask about any of this, write to us.

Changes to this policy

If this game ever changes what it does with data, we will update this page and the date at the top before that version ships, and we will say plainly what changed.

Contact

Write to [email protected] — the same address on our Google Play and App Store listings. A person answers it.