Privacy Policy

Last updated: June 2026

This policy explains what The Canon (the “Service”) collects and how it is used. We aim to collect as little as possible.

What we collect

Gameplay data. A randomly generated player ID (stored in your browser) and your in-game progress: unlocks, notes, theories, and the text of questions you ask.
Operational data. Basic request metadata (such as IP address) used transiently for rate limiting and abuse prevention.

We do not require an account, and we do not ask for your name, email, or payment details to play the free experience.

AI processing

To generate characters’ replies and analysis, the text you submit and relevant game context are sent to our AI provider, OpenAI, which processes them as a subprocessor under its API terms. Please avoid entering personal or sensitive information into free-text fields.

Community features

Aggregated, anonymized theory statistics may be shown to other players (for example, which suspect the community favors). These are designed not to identify you; do not include identifying details in theory text.

Cookies and local storage

We use your browser’s local storage to keep your player ID and remember that you have started a case. We do not use third-party advertising trackers.

Data retention and your choices

Clearing your browser’s site data removes your local player ID. To request deletion of server-side gameplay data associated with your player ID, contact us at hello@playthecanon.com.

Children

The Service is not directed to children under 13 (or the age of digital consent in your region) and we do not knowingly collect their data.

Changes

We may update this policy; the “Last updated” date will reflect changes.

Operator note: confirm your legal entity, contact address, data retention periods, and region-specific obligations (GDPR/CCPA) with qualified counsel before charging users or accepting EU/CA traffic.