Privacy Policy

Last updated: 2026-09-06

Who operates this app

BadassPedia is operated by Jure Pirs. For any question about this policy or your data, contact admin@badasspedia.com.

What data we collect

  • Account data — email address, display name, password (stored hashed, never in plain text).
  • Profile preferences — mailing-list preference, avatar.
  • Content you submit — star ratings on quotes; quotes you submit, if you have submission access. Comments posted before the feature was withdrawn in September 2026 are still stored, though no longer shown anywhere — see How long we keep data.
  • Session cookie — keeps you signed in. See Cookies below.
  • Google account info — name, email, profile picture, only if you choose to sign in with Google.
  • Basic technical logs — IP address and request metadata, used only to rate-limit abuse (e.g. repeated sign-in attempts) and to diagnose server errors. Error logs are automatically deleted after 30 days.

We do not collect payment information, precise location, or browsing activity outside this app.

Why we use it

  • To create and secure your account, and keep you signed in (contract).
  • To show your ratings and let you manage content you've submitted (contract).
  • To send account emails — verification, password reset (legitimate interest).
  • To prevent abuse and keep the service running reliably (legitimate interest).
  • To send newsletter/marketing email, only if you opt in via your profile (consent — see Your rights for how to withdraw it).

Cookies

We use a single cookie, better-auth.session_token (or similar), set when you sign in and removed when you sign out. Its only purpose is to keep you logged in between visits. It expires after 7 days of inactivity and refreshes automatically while you're active. A small amount of browser storage is also used to remember that you've dismissed the cookie notice itself.

  • No analytics or tracking cookies
  • No advertising or retargeting cookies
  • No third-party cookies

Sign out at any time to remove the cookie immediately, or clear it via your browser's cookie settings.

Who we share data with

We don't sell or rent your data. We use the following processors to operate the app, each under their own data processing terms:

  • MongoDB Atlas — stores all account and content data.
  • Vercel — runs the application.
  • Cloudflare — DNS, CDN, and bot/DDoS protection in front of the app.
  • Our transactional email provider — delivers account and, if you opt in, newsletter email.
  • Google — only if you choose to sign in with Google.

Some of these providers are based outside the EEA (the US); where that applies, they rely on Standard Contractual Clauses or an equivalent safeguard recognised under GDPR.

How long we keep data

We keep your account data for as long as your account is active. If you delete your account, your profile, email, and password are removed immediately.

Star ratings you've cast become anonymous once your account is deleted — they remain only as part of a quote's aggregate average, with no name attached.

Comments are different. We withdrew the comment feature in September 2026: you can no longer post one, and none are displayed anywhere on the site. Comments written before then were not deleted — each is still stored beside the rating it was attached to, along with the name you were using when you posted it, and deleting your account does not remove that name from it. Nothing is on public display either way, but if you want a comment of yours erased outright, email admin@badasspedia.com and we'll remove it. There is no longer a page you can do it from yourself.

Your rights

Depending on where you live, you may have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Correct it — most profile fields can be edited directly from your profile page.
  • Export it in a portable format — download a copy any time from Profile → Download my data.
  • Delete your account and associated data — available any time from Profile → Delete account. See How long we keep data above for what happens to comments and ratings.
  • Withdraw consent for marketing email — turn off the mailing-list preference in your profile, or use the unsubscribe link in any marketing email.
  • Object to or restrict certain processing — contact us at the address above.

We respond to requests within one month. EU/EEA residents also have the right to lodge a complaint with their local data protection authority (in Ireland, the Data Protection Commission).

Age requirement

This service is not directed at children. You must be at least 16 years old to create an account. Quotes here are not filtered by taste and many contain strong language.

Changes to this policy

If we make material changes, we'll update the date at the top of this page and, where required, notify you directly. See also our Terms of Use.