Privacy Policy — Bad Judgment Lab

Accounts and Facebook data

Normal gameplay does not currently require an account. Bad Judgment Lab does not currently use Facebook Login and does not retrieve or store Facebook profile information, friend lists, contact lists, or other Facebook account data.

Share controls may open third-party services such as Facebook. Those services process activity under their own privacy policies and controls.

Information used to operate the site

Anonymous browser data

The site uses browser storage for anonymous session continuity and game behavior. This includes a session identifier for analytics, the 90s scenario cycle within a browser session, and anonymous Who’s the Problem? room credentials stored on the device. Clearing Bad Judgment Lab browser or site data may remove the ability to resume an anonymous room or continue a saved browser-local cycle.

The public experiences do not currently depend on advertising cookies. Browser features such as localStorage, sessionStorage, or cookies may be used where technically required.

Who’s the Problem? multiplayer rooms

Participants enter temporary display names. The service stores the room name, display names, anonymous participant identifiers, hashed participant tokens, votes, room progress, results, timestamps, and limited room-specific commentary needed to run the room. Room codes and participant credentials should be treated as private links.

Multiplayer rooms and their associated room state expire automatically after approximately 48 hours. Expired room records are deleted as the service performs cleanup.

Security and abuse prevention

For room creation and joining, the service creates a one-way hash derived from the connecting address to enforce short-lived rate limits. The raw connection address is not stored in that rate-limit table.

First-party analytics

Bad Judgment Lab collects first-party analytics to understand usage, reliability, and how the experiences can be improved. Analytics may include:

• the page or experience viewed and broad interaction events;
• anonymous event and session identifiers;
• broad referral source;
• broad device and browser categories;
• hashed room or participant identifiers where needed for multiplayer counts; and
• non-identifying gameplay measurements such as an archetype ID, prompt pack, round number, vote progress, or sharing method.

Analytics identifiers are hashed and salted where applicable. Raw IP addresses are not retained in the analytics data model.

Analytics are not intentionally designed to store display names, raw room codes, raw participant tokens, email addresses, phone numbers, contact lists, social-account identities, or personalized roast/profile information.

Sale of information

Bad Judgment Lab does not sell personal information.

Your choices

You can remove browser-local Bad Judgment Lab information by clearing cookies and site data for badjudgmentlab.com in your browser. This may prevent recovery of an anonymous multiplayer room.

For server-side deletion questions, see the Data Deletion instructions.

Contact

Privacy and data-deletion questions may be sent to privacy@badjudgmentlab.com.