Privacy Policy

Last updated: 2026-07-08

Who operates this app

BadassPedia is operated by Jure Pirs. For any question about this policy or your data, contact admin@badasspedia.com.

What data we collect

  • Account data — email address, display name, password (stored hashed, never in plain text).
  • Profile preferences — adult-content toggle, mailing-list preference, avatar.
  • Content you submit — star ratings and comments you post on quotes; quotes you submit, if you have submission access.
  • Session cookie — keeps you signed in. See Cookies below.
  • Google account info — name, email, profile picture, only if you choose to sign in with Google.
  • Basic technical logs — IP address and request metadata, used only to rate-limit abuse (e.g. repeated sign-in attempts) and to diagnose server errors. Error logs are automatically deleted after 30 days.

We do not collect payment information, precise location, or browsing activity outside this app.

Why we use it

  • To create and secure your account, and keep you signed in (contract).
  • To show your ratings and comments and let you manage content you've submitted (contract).
  • To send account emails — verification, password reset (legitimate interest).
  • To prevent abuse and keep the service running reliably (legitimate interest).
  • To send newsletter/marketing email, only if you opt in via your profile (consent — see Your rights for how to withdraw it).

Cookies

We use a single cookie, better-auth.session_token (or similar), set when you sign in and removed when you sign out. Its only purpose is to keep you logged in between visits. It expires after 7 days of inactivity and refreshes automatically while you're active. A small amount of browser storage is also used to remember that you've dismissed the cookie notice itself.

  • No analytics or tracking cookies
  • No advertising or retargeting cookies
  • No third-party cookies

Sign out at any time to remove the cookie immediately, or clear it via your browser's cookie settings.

Who we share data with

We don't sell or rent your data. We use the following processors to operate the app, each under their own data processing terms:

  • MongoDB Atlas — stores all account and content data.
  • Vercel — runs the application.
  • Cloudflare — DNS, CDN, and bot/DDoS protection in front of the app.
  • Our transactional email provider — delivers account and, if you opt in, newsletter email.
  • Google — only if you choose to sign in with Google.

Some of these providers are based outside the EEA (the US); where that applies, they rely on Standard Contractual Clauses or an equivalent safeguard recognised under GDPR.

How long we keep data

We keep your account data for as long as your account is active. If you delete your account, your profile, email, and password are removed immediately.

Star ratings you've cast become anonymous once your account is deleted — they remain only as part of a quote's aggregate average, with no name attached. Comments are different: because a comment displays the name you were using at the time you posted it, deleting your account does not retroactively remove that name from comments already posted. If you want a specific comment gone, remove it yourself from the quote page before deleting your account.

Your rights

Depending on where you live, you may have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Correct it — most profile fields can be edited directly from your profile page.
  • Export it in a portable format — download a copy any time from Profile → Download my data.
  • Delete your account and associated data — available any time from Profile → Delete account. See How long we keep data above for what happens to comments and ratings.
  • Withdraw consent for marketing email — turn off the mailing-list preference in your profile, or use the unsubscribe link in any marketing email.
  • Object to or restrict certain processing — contact us at the address above.

We respond to requests within one month. EU/EEA residents also have the right to lodge a complaint with their local data protection authority (in Ireland, the Data Protection Commission).

Age requirement

This service is not directed at children. You must be at least 16 years old to create an account. Some quotes are flagged as adult content and are hidden by default; you must explicitly opt in via your profile to view them.

Changes to this policy

If we make material changes, we'll update the date at the top of this page and, where required, notify you directly. See also our Terms of Use.