Legal

Privacy — Large Language Murder.

This game has no accounts, asks for no names, and collects nothing about you. There is no advertising, no analytics and no tracking of any kind, in any mode. It ships with everything that could use the network switched off, and it is a complete game that way. Three things can turn a connection on, you choose each one, and each is set out below.

Last updated 21 August 2026

Which app this policy covers

This page covers one app, and only one. Our other mobile games — which collect nothing and never open a network connection — are covered separately at privacy for our mobile games.

• Large Language Murder com.hauntedspacehotel.large_language_murder A pass-and-play party game for one device and a table of people. Not a children's title.

The short version — three switches

Out of the box this game opens no connection at all. Each of the three things below is off until you turn it on, each is independent of the other two, and the game is complete with none of them.

What we collect

Nothing. There is no account, no sign-in, no profile, no advertising and no analytics. Specifically, this app does not ask for, access, collect, store or transmit to us:

• Email addresses, phone numbers or postal addresses
• Location of any kind, precise or approximate
• Contacts, calendar, photos, files, microphone or camera
• Advertising IDs, device identifiers or any other tracking identifier
• Usage analytics, gameplay telemetry, crash reporting of our own, heat maps or session recordings
• Cookies, web beacons or cross-app profiles

We run exactly one piece of server infrastructure for this game and it is a relay. It exists so that people who are not in the same room can play together, it forwards messages between your devices without reading them, and it keeps nothing — no account, no record of a game, no log of what was passed through it. It is described in full further down, because a promise about a server is worth more when the server is named.

1 · The live AI — what leaves the device, and exactly when

The game asks you to type your name once per game, for the card that says whose turn it is. That name stays on the device. It is not sent anywhere, in any mode, and this is structural rather than a policy we are keeping to — every seat that appears in a request to Anthropic is written by a piece of code that produces PLAYER THREE and cannot see the list of names at all.

If — and only if — you have supplied your own API key and switched the live AI on, the app makes requests direct from your device to Anthropic, each round, of at most three kinds:

• The AI's own answers — carrying the one-word prompt, and the answers, authors and votes from rounds already revealed to the table, so it can play like somebody who has been sitting there. Each seat is named PLAYER ONE, PLAYER TWO and so on.
• One line for the score card — sent after the round is already scored, carrying the same round's cards.
• In HIDE only, one verdict request per AI juror — each carrying the prompt word and the cards on the board, so that juror can decide which one it thinks the human wrote.

In PEEK, the round in progress goes too — but only in SEEK, where the AI is the one being hunted and therefore the one that gets to read the table. In HIDE it is you who reads, and the jurors are sent nothing extra at all. Whichever it is, the mode is chosen on the title screen, in front of everybody, before a game starts.

Nothing else goes with it. No name, no account, no device identifier, no advertising ID, no location, no contacts, and nothing that persists between games.

One honest caveat, and we would rather write it down than sound cleverer than we are. An answer is free text — up to six words of six letters, typed by a person. We do not attach a name to it and we never ask for one, but we cannot promise nobody will ever type something that identifies somebody at that table. What we can promise is what the app does with it: it goes to Anthropic to produce one line of text, we never see it, and neither of us keeps it.

The API key is yours

This app ships no API key of its own. If you want the AI to answer live, you create a key in your own Anthropic account and paste it into the game. It is written to the app's private storage on the device, it is sent to nobody but Anthropic, and it never reaches us. Usage is billed to your account, not ours — a game costs a few cents. Delete the key, or uninstall the app, and the live half stops; the game carries on working exactly as before.

2 · Playing with other people — two wires, and only one of them is ours

Everybody can play on their own phone instead of passing one device round. There are two ways to connect and the game asks you which, in those words, before it opens anything.

On the same Wi-Fi — no server, ours or anybody's

One device hosts and the others find it on the same network. That traffic goes device to device: it does not leave your network, it reaches no third party, and no server is involved at all — it works with the broadband unplugged. It carries the seats, the answers and the votes for the game in progress, and nothing else. It is not encrypted, because it is a party game talking to the phone next to it on your own Wi-Fi, and we would rather say that than imply otherwise.

Over the internet — a relay we run, that keeps nothing

If the people you are playing with are somewhere else, the host can open the game over the internet instead. The device that hosts and the devices that join each make an encrypted connection to manager.hauntedspacehotel.com, a server we operate, and it passes messages between them. The four letters on the host's screen are the address of that room and the only thing anybody types.

What the relay is, precisely:

• It does not understand the game. It has no idea what a player, a round, a prompt or a score is. It forwards whatever it is given to the other devices in the same room, untouched.
• It stores nothing and logs nothing. There is no database, no account, no history and no record of who connected or what was passed through. Access logging is switched off on that server, and errors are recorded by error code, never by content.
• A room lasts exactly as long as the host's connection. When the host leaves, the room is gone and the code means nothing again.
• Traffic is encrypted between each device and the relay (TLS, over the same port a browser uses).
• There is no list of games to browse and no way to be found. A room is reachable only by somebody you gave four letters to. We publish nothing about any player, ever, and we are not going to.

⚠ Two ordinary internet facts we would rather state than leave implied. Like every internet service, the relay and the content-delivery provider in front of it (Cloudflare) necessarily handle the connection itself — which means your device's IP address is visible to them for as long as you are connected, in the same way it is to any website you open. We do not use it for anything, we do not keep it, and it is not joined to anything else, because there is nothing else. And the relay is only ever running when you chose the internet option: pick same Wi-Fi, or play on one device, and no part of this section happens at all.

3 · The purchase

The game is free, and there is one optional purchase that unlocks extra word decks and lets you host a game. It is a single permanent purchase — no currency, no subscription and nothing else to buy.

The transaction is entirely Google's. It runs through Google Play Billing, in the Play app on your device. We never see and never receive your name, your email address, your card details or your Google account — Play answers the app with nothing more than whether this device has bought it. Google's handling of the payment is covered by the Google Privacy Policy. There is no advertising in this app, of any kind, and there never will be.

What is kept on the device

Two files, in the app's own private storage, which no other app can read and neither of which is backed up to us:

• Your settings — a handful of numbers: narrator voice on or off, live AI on or off, which mode, how many AI opponents, which decks of prompts. That is the entire file.
• Your API key, if you pasted one in.

There is no save game, no history, no scoreboard and no record of who played or what anybody wrote. The AI's memory of the evening lasts exactly as long as the game does. Uninstalling the app, or clearing its data in Android's settings, removes both files completely.

AI-generated content, declared on purpose

This game is about an artificial intelligence and a great deal of it was written by one. We are saying so deliberately, and it applies to the offline build as much as the online one:

• The prompt words are AI-generated.
• The answers the AI plays when it is not connected are AI-written, and they ship inside the app.
• The title lettering, the app icon and the store artwork are cut from AI-generated images.
• When you supply a key, the AI's answer for the round is written live.

Whatever the AI writes is held to the same rule every player is: one to six words, each at most six letters, letters only, checked by the game's own rules engine before it can reach the table. A reply that fails is thrown away and a pre-written line is used instead, so nothing you see on a card is unchecked model output.

This is the one game we make that is built this way, and it is the one game where it is the point. Every other title from this studio is signed 100% Designed by Humans, and that stays true.

Third parties

• Anthropic — and only if you supply your own API key. They process the request that produces the AI's answer, under Anthropic's privacy policy. With no key, no request is ever made.
• Cloudflare — and only if you host or join a game over the internet. They sit in front of our relay and handle the connection, under Cloudflare's privacy policy. On the same Wi-Fi, or on one device, they are not involved.
• Google Play — for distribution, and for the one optional purchase. Google gives us aggregate, anonymised console statistics: install counts, ratings, anonymous crash reports. We cannot identify anyone from them and we have asked for nothing more.

There are no ad networks, no analytics providers, no social logins, no crash-reporting SDKs of ours and no other cloud services in this app.

Permissions

The Android build declares the following, and every one of them is a normal permission — Android grants them without a prompt and none gives access to anything about you:

• INTERNET — the requests to Anthropic when you have supplied a key, and playing over the internet if you choose it.
• CHANGE_WIFI_MULTICAST_STATE — so a phone can find the host on your own Wi-Fi when you play across devices.
• ACCESS_NETWORK_STATE — used by Google's billing library to tell whether the device is online.
• com.android.vending.BILLING — so the app can ask Google Play about the one purchase.

The game requests no other permission at all: no location, no storage, no contacts, no camera, no microphone and no advertising ID. The narrator voice needs none — Android's text-to-speech runs on the device.

Children

This is not a children's title and is not in Google Play Families. It is intended for players aged 13 and over. It is a party game in which people write things and an AI writes things back, and unlike our other mobile games we are not going to claim it is suitable for a small child.

Third-party licences

This game is built on other people's work as well as ours. The notices that work is owed are listed on our third-party licences page, ship as a text file beside the desktop build, and are in the app itself under Settings → Notices.

Your rights

Data-protection law gives you the right to access, correct, export or delete the personal data a company holds about you. We hold none — there is no account, no database and nothing kept on the relay — so there is nothing on our side to access or delete. To remove what is on the device, delete the key in the app, or uninstall it, or clear its data in Android's settings. If you want to ask about any of this, write to us.

Changes to this policy

If this game ever changes what it does with data, we will update this page and the date at the top before that version ships, and we will say plainly what changed.

Contact

Write to [email protected] — the same address on our Google Play listings. A person answers it.