Privacy

When you play

To run a game we store what the host types in setup (first names, what each person is known for, an optional inside joke) and what players do during the game (votes, hints, which clue they shared).

Each phone gets a random token so it can rejoin its seat. There are no accounts and no passwords.

A game is deleted 48 hours after its last move. We keep only an anonymous summary (number of players, how long it took, whether the culprit was caught) to improve the game.

If you ask for emails

If you give us your email for new mysteries, we store it with the optional details you add (first name, occasion, group size). We only use it to tell you about new mysteries.

To be removed, email support@badalibi.lol and we’ll delete it.

Analytics

On badalibi.lol we use Google Analytics 4 to count visits and game steps (for example, “a game was created” or “a game finished”). It never receives names, quirks, hints or anything typed into the game.

If your browser sends Do Not Track or Global Privacy Control, analytics doesn’t load at all.

Who processes the data

Games and emails are stored with Supabase. The website is served by Cloudflare. Analytics is Google Analytics. We don’t sell data and don’t run ads.

Questions

Email support@badalibi.lol.