Last updated September 26, 2026 · BAD ADS by OTECH Labs
BAD ADS is a game about beating ads, so we keep this short and we don't do what the ads do: no ad networks, no third-party trackers, and we never sell your data. This page says what the game stores, why, and how to delete it.
Device ID. The first time you play, your browser gets a random ID, kept in its local storage with your save. It counts your Daily tries, verifies scores, checks reward codes and stops abuse. It isn't tied to your name, email or IP address. Clearing your browser's site data gives you a new one (and a fresh save).
Gameplay events. A handful of anonymous events (a run started or ended, a fight or mini-game finished, a card pick, how long the first tap took) are sent with your device ID and the game details: scores, times, choices. We use them to balance the game. They contain no names or emails.
Hashed network. When you start a ranked run, post a score, win a sponsor reward or report a sponsor bot, we keep a salted one-way hash of your network (your IP address, or the block it belongs to), never the address itself. It limits abuse, like one household farming rewards or Daily tries. It can't be turned back into your IP address.
Scores. Posted scores are shown on the leaderboards with the name you picked. Replays of verified runs (your inputs, not video) are kept to check scores and power the “challenge a friend” links and 1v1 ghosts. A 1v1 duel's page shows the name, damage and cards of the player who set it, and the names and damage of everyone who answered, to anyone with its link.
Email and password. Your email address and a password, stored as a one-way hash by our sign-in library. We don't send email yet, so there is no password reset.
X. If you continue with X, we get your X user ID, display name, username, profile picture and, if X has confirmed it, your email. X's sign-in tokens are stored encrypted. We never post to X or read your posts.
Cloud save and sessions. Your game progress is saved to your account so you can play on other devices. Sign-in sessions record when they were made, plus the IP address and browser they came from, for security.
Payments go through Stripe. We store what you bought, the price, its status (paid or refunded) and Stripe's reference IDs so we can deliver it and restore it on other devices. We never see or store your card number. Stripe's privacy policy covers the payment details you give them.
Businesses (and people) who sponsor a bot send us a name, a logo, the bot's lines, an optional reward and link, and a contact name and email. Once a person on our team approves it, the name, logo, lines, reward and link are shown in the game to everyone. The contact details stay private: we use them for approval, receipts and support. Player reports about a sponsor bot (the reason, your device ID and hashed network) are kept so we can review it. Reward codes record the device that won them, when, and when a business marked them used.
Vercel hosts the game, Neon runs its database, Stripe handles payments and X handles X sign-in. They process data only to provide those services to us.
Gameplay events and device-linked records: up to 24 months. Account data and your cloud save: until you delete your account. Purchase records are kept as long as tax and accounting law requires, without your name or email once you delete your account.
BAD ADS is made for all ages, and anyone can play without giving us personal information. Accounts are for players 13 and up (X requires 13+ too). We don't knowingly collect personal information from children under 13; if you think a child has given us some, email us and we'll delete it.
What we store in the browser, and the cookies Stripe and X set when you pay or sign in with X, is on the cookies page. We don't use ad networks or third-party trackers.
BAD ADS is operated by Otech Labs LLC, 33 W Palmer St, Danielson, CT 06239. If this policy changes, we'll update the date at the top and, for big changes, say so in the game. Questions: support@otechlabs.io.