Can You Spot It is a free trivia game made by a team of four in the United States. We keep as little about you as we can. This page explains what we keep, why, and for how long. Last updated November 7, 2026.

We never ask for your real name, age, location, phone number or a password, and you never need an email address to play. There are no ads and no tracking cookies.

Your browser remembers your detective name, avatar, background color, sound and accessibility settings, which Daily Prompts you have played, and a random player ID, so the game knows you when you come back. Clearing your browser’s site data removes them.

Your player ID, detective name, avatar and detective code, so your name is yours and your code can bring your stars to another device.

Your Daily Prompt answers, stars and times, so the leaderboard works. Your detective name, avatar and stars are shown on the public leaderboard. They are kept for the current two-week season and the one before it, then deleted automatically.

From launch on November 11, 2026, each category level has one puzzle a week that earns points. Your answers to it are kept until the week is over and deleted automatically within two weeks. Your points for each one (the level, how many mistakes you found and the points) are kept as long as your player is, for your season and all-time totals.

Practice rounds (the Random Challenge, "Same paragraph, new mistakes", and category rounds before November 11) are deleted automatically 24 hours after you start them.

When you finish a category round, we save a copy of the puzzle with your detective name and score, so the Challenge a friend link can show them to whoever opens it. These copies are deleted automatically after 30 days.

When two players with detective names play each other's challenges, we keep a private head-to-head record (who won each one and the points each would earn) so they can see it on their results. It is only shown to those two players, and is deleted if either asks us to remove their player.

To stop abuse, we keep a scrambled code made from your internet address (never the address itself) for up to a day, to limit how many rounds or messages one connection can send.

To see how many people visit and which pages they use, we use Vercel Web Analytics. It counts which page was opened (never the rest of the web address, so challenge codes stay private), the country, the type of device and browser, and the website that sent you here, like Instagram or Google. It uses no cookies, doesn’t follow you to other websites, and can’t tell us who you are. Our team review page is never counted.

This is optional. If you add your email in Settings, we do not store your email. We keep only a scrambled fingerprint of it, made with a secret key, which can’t be turned back into your email, even by us. When you type your email to get back in, we make the same fingerprint to find your player, and send a 6-digit code to the email you just typed. Each code works for 10 minutes, and we keep only a scrambled copy of it. The emails are sent by Resend, an email service in the United States, which keeps a short record of emails it sends. We never use your email for newsletters or ads. You can remove it in Settings at any time, and it is deleted with your player.

If you send a message with Contact Us or Report a problem, we keep your message, the screen you were on, the puzzle you were reporting (if any), your device and browser type, and your email if you chose to give one. Messages are shared with our team in a private project on GitHub. We only use your email to reply to you, and never add it to a mailing list.

The website is hosted by Vercel, and our database by Supabase, in the United States. Like most websites, they may briefly record your internet address in their logs. The mistakes in each puzzle are made with an AI service from Anthropic, which only ever sees the true paragraphs, never anything about you.

You can change your detective name or avatar at any time in Settings. To have your player, scores and messages deleted, send us a message with Contact Us and include your detective code (it’s in Settings).

Can You Spot It is meant for players aged 13 and older.

Questions about your privacy? Email us at canyouspotthemistake@gmail.com, send a message with Contact Us, or find us at @canyouspotthemistake on Instagram and YouTube.

If we change this page, we’ll update the date at the top.