Privacy Policy

Last updated: 22 April 2026

1. Who We Are

This website, ispy.bet (the "Site"), is operated by Ian Hudson ("we", "us", "our"). We are the data controller responsible for your personal information.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at admin@ispy.bet.

2. What Information We Collect

2.1 Information you provide directly

  • Account information — your username, email address, and password (stored as a one-way bcrypt hash; we never store your plain-text password).
  • Profile preferences — your chosen avatar emoji, if you select one.
  • Communications — any messages you send us at admin@ispy.bet.

2.2 Information collected automatically

  • Game activity — games you host, guesses you submit, credits earned and spent. This is necessary to operate the service.
  • Session data — a session cookie is set when you log in to keep you authenticated. It does not track you across other websites.
  • Server logs — standard web server logs may record your IP address, browser type, and pages visited for security and debugging purposes. These are not used for profiling.

3. How We Use Your Information

  • To create and manage your account.
  • To operate the game: process guesses, track credits, calculate prizes, and run the leaderboard.
  • To send you service-related communications (e.g. account notifications). We do not send marketing emails.
  • To detect and prevent fraud, abuse, or violations of our Terms & Conditions.
  • To comply with legal obligations.

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

  • Contract performance — processing necessary to provide the service you have signed up for (account management, game operation, credit handling).
  • Legitimate interests — preventing fraud and abuse, improving security, and maintaining server logs. We have balanced these interests against your rights and do not believe they override them.
  • Legal obligation — where we are required to process data to comply with applicable law.
  • Consent — where we specifically ask for your consent (e.g. for optional features). You may withdraw consent at any time.

5. Sharing Your Information

We do not sell your personal data. We may share it only in the following circumstances:

  • Legal requirements — if required to do so by law, regulation, or a valid court order.
  • Business transfer — in the unlikely event that the Site is sold or transferred, your data may be transferred as part of that transaction. You will be notified if this occurs.

Some pages load fonts from Google Fonts (fonts.googleapis.com). Google may record that your browser fetched the font files. See Google's Privacy Policy for details.

6. Cookies

We use one session cookie, set when you log in, to keep you authenticated during your visit. This cookie is:

  • Essential to the operation of the service.
  • Deleted when your session expires or you log out.
  • Not used for advertising or cross-site tracking.

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

7. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal reasons.

Game records (guesses, outcomes) may be retained in anonymised or aggregate form for statistical and leaderboard purposes after your account is deleted.

8. Your Rights

Under the UK GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your personal data ("right to be forgotten"), subject to legal obligations.
  • Restriction — ask us to restrict processing of your data in certain circumstances.
  • Data portability — receive your data in a structured, commonly used format.
  • Object — object to processing based on legitimate interests.
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at admin@ispy.bet. We will respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Passwords are hashed using bcrypt and are never stored or transmitted in plain text.

No method of internet transmission is completely secure. If you believe your account has been compromised, please contact us immediately at admin@ispy.bet.

10. Children

Under 13s: Children under the age of 13 must not register or use the Site. We do not knowingly collect personal data from anyone under 13. Under UK GDPR, the age of digital consent for information society services is 13; we rely on this threshold for account registration. If we become aware that an account has been registered by someone under 13, we will delete the account and all associated data promptly.

Ages 13–17: Users aged 13 to 17 may register and use Practice Mode. We collect the same account data as for adult users (username, email address, hashed password, avatar, and game activity). This data is used solely to operate the service and is handled in accordance with this Privacy Policy.

If you are the parent or guardian of a child who has registered and you have concerns about their account or the data we hold, please contact us at admin@ispy.bet and we will be happy to help, including deleting the account if requested.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the Site after changes are posted constitutes acceptance of the revised policy. For significant changes, we will make a reasonable effort to notify registered users.

12. Contact Us

For any privacy-related enquiries, requests, or complaints, please contact:

Ian Hudson
Email: admin@ispy.bet