Whodunit Online

Privacy

The short version: we store nothing. There is no account, no database and no case of yours on our server. Below is exactly what does happen, including the part that is less obvious.

What stays in your own browser

The case you are working on, the classes and floor plans you keep, and the notes a player makes all live in your own browser’s storage. They go nowhere. Clear your browsing data and they are gone, for us too, because we never had them.

We set one cookie: which language you chose. That is all. Visits are counted by our hosting provider, with no cookie and nothing that follows you from site to site. There are no third-party trackers.

What a share link contains

A share link carries the whole case inside it: the names, the faces, the rooms and where the body lies. That is why nothing needs storing. But it also means anyone with the link can open the case, including the names you typed.

Because the case is in the address, it also lands in the logs of the server that serves the page. So do not put anything in a case that could not go in an email. A class list of first names is fine; sensitive details are not.

Share links are not in Google: we explicitly ask search engines not to index them.

The only thing that leaves your browser

If you use “Draw it” to have a floor plan drawn from your description, we send two things to Google’s language model service: the names of the rooms, and the sentence you wrote. Nothing else: no suspects, no victim, no case.

If you do not use that button, nothing leaves your browser beyond fetching the page itself.

If you create an account

Then we do keep something: your email address, a name, and the cases you deliberately put in your library. A kept case contains the names you typed, usually children’s, and sits on our server until you remove it.

Purchases go through Stripe. We never see card details; Stripe tells us only that a payment was made and how much.

You delete your account yourself, on your account page, and it is immediate and final: account, sessions, kept cases and credits go. Only the purchase record stays, without your name, because the books require it.

Children

This is built for classrooms, so it probably has children’s names in it. That is exactly why we ask for nothing and keep nothing. We do not know who is in your case and have no way to find out.

Last updated: September 2026