1. Who we are
Bad Mole is a casual browser-based game operated by the Bad Mole development team. This Privacy Policy applies to the Bad Mole game, account services and related pages available at www.badmole.com.
Privacy and account requests can be sent to info@badmole.com.
2. Information we collect
Guest play and local information
Players may use Bad Mole without registering. Guest settings and progress—such as language, theme, sound preferences, local scores, local coins, unlocked levels and selected cosmetic items—may be stored in the player’s browser using local storage. This information normally remains on that device unless the player clears browser data.
All Classic scenes, solo puzzle games and story modes are available without an account, subject to normal chapter and cosmetic unlock rules. Guest puzzle results and local reward receipts are also stored in browser local storage to retain scores and prevent duplicate local rewards. Guest game results and coins are not submitted to the account service or automatically imported into a signed-in wallet. Public rankings and comments can be read without signing in; posting comments and submitting verified online scores require an account.
Email account information
If a player registers or signs in by email, we process the email address, verification-code records, game nickname, account identifiers, session information and security records. Verification codes are used only to confirm account access and are not used to subscribe players to marketing messages.
Google Sign-In information
The current release offers email verification-code sign-in. Google Sign-In is not enabled in this release: the game does not send Google OAuth authorization requests, request Google permissions, or receive Google account identifiers, profile information, access tokens or refresh tokens. Using a Gmail address for an email verification code is email authentication, not Google Sign-In.
If Google Sign-In is introduced, we will update this policy and explain the requested information before enabling that feature. Earlier wording describing Google Sign-In as an available account-linking method did not reflect the deployed implementation and has been corrected.
Game and account records
For signed-in players, we may store verified scores, hit and combo statistics, coins, wallet entries, completed and unlocked levels, redeemed cosmetic items, current equipment, game-run identifiers and anti-cheat validation events.
Dream Mender chapter repairs and progress can be saved to the signed-in account. Guest-only records and locally imported music are not automatically synchronized to an account.
Player comments
Signed-in players may publish plain-text comments and a game topic. Comments are publicly readable, including by visitors without an account. We store the comment text, topic, author account reference, publication time and request identifiers used to prevent duplicate posts. Public entries show the author’s public account identifier, nickname and avatar; the comment list does not disclose email addresses or session credentials. Do not include private information in a public comment.
You can delete your own comments from the player-comments interface; administrators can remove comments for moderation. Deletion clears the text and removes the entry from public listings, while a record of its identifiers, topic, creation/deletion time, moderation actor and request hash remains in the database. Previous copies may remain in restricted backups or in copies made by other readers. Contact us for a personal-data deletion request.
Custom music stored on your device
Audio files you select, their filenames, media types, sizes, durations, import times and the selected-track preference are stored in this device’s browser using IndexedDB. Files are decoded and played locally; they are not uploaded to Bad Mole or shared with Google, other players or another device. You can remove tracks in Settings → Local music, or clear this website’s browser data to remove the local library. Signing out or requesting server-account deletion does not clear files on your device.
Avatars, public rankings and approximate location
Signed-in players can choose or take a photo to create an avatar. Only the cropped 256×256 JPEG is uploaded; the server re-encodes it to remove photo metadata. Camera and photo access occurs only when you choose the relevant button. Avatars are stored with your account until replaced or the account is deleted.
Players with server-recorded games and a nickname may appear in public world rankings. Rankings show nickname, avatar, best score, game statistics and approximate country, region or city inferred from the connection IP. Email addresses, balances and IP addresses are not public. Guest-only local scores are not ranked.
When location lookup is enabled, the server sends the connection IP to IPWhois over HTTPS to obtain a coarse country, region and city. We store a keyed IP hash and location labels, not GPS coordinates or a street address. Location can be inaccurate, particularly with VPNs or mobile networks. Lookup failures display an unknown location. The daily cleanup job removes IP cache entries whose last check is older than eight days; the last approximate location remains with your account. Contact us to request removal of your profile or account data.
Technical and security information
Our systems may process IP addresses, browser and device information, request times, server access logs and security events. Within the account system, IP addresses and user-agent values used for rate limiting and audit records may be stored as keyed hashes rather than plain values. Hosting infrastructure may still retain ordinary access logs for a limited operational and security period.
3. How we use information
We use information to:
- provide guest play and remember local preferences;
- create, authenticate, secure and recover player accounts;
- save and synchronize eligible scores, coins, progress and cosmetic items;
- publish player comments and support owner deletion and administrator moderation;
- validate game results and reduce fraud, abuse and automated attacks;
- send requested verification codes and essential service messages;
- diagnose errors, maintain availability and improve the game; and
- comply with applicable legal obligations.
4. Google user data
Bad Mole does not request or access Gmail messages, Google Drive files, Google Calendar data, contacts, documents or other private Google content. No Google OAuth scopes are currently requested. We do not sell Google user data or use it for advertising, credit decisions, surveillance or training artificial-intelligence models.
Any future use or transfer of information received from Google APIs must comply with the Google API Services User Data Policy, including applicable Limited Use requirements, and will be described before that integration is enabled.
5. Cookies and local storage
Bad Mole uses an essential secure session cookie to keep registered players signed in. We use browser local storage for guest records, preferences and local game state, and IndexedDB for the optional local music library. These technologies support the requested game and account functions; we do not currently use them to build third-party advertising profiles.
6. Service providers and disclosures
We use hosting and database infrastructure and email delivery for requested verification codes. If approximate-location lookup is enabled, IPWhois receives the connection IP for that lookup. These services process information to operate their respective functions. Public rankings, avatars and player comments are shared with other website visitors as described above. Custom music stays on your device. Google is not an authentication service provider for the current release.
We may disclose information if reasonably necessary to comply with law, protect users or the service, investigate abuse, or establish and defend legal claims. We do not sell or rent personal information.
7. International processing
Bad Mole and its service providers may process information in countries other than the player’s country of residence. Where required, we use appropriate contractual, technical or organizational safeguards for international processing.
8. Retention
- Guest data remains in the browser until it is overwritten or the player clears browser storage.
- A daily maintenance job removes email verification records older than two days from the live database. A record may therefore remain until the next successful daily run after that threshold; expiry of a code prevents its use sooner.
- The same job removes expired sessions, and revoked sessions whose revocation is older than 30 days. Revoked or expired sessions cannot be used to sign in.
- The daily job removes authentication audit records older than 180 days, IP-location cache entries older than eight days and old location-budget records. Failed maintenance can delay removal; these are live-database cleanup thresholds, not guarantees that all copies disappear at that exact time.
- Expired or rejected game-run records older than 30 days are removed by maintenance. Finalized game records, wallet history, account progress, public comments and comment-deletion metadata have no automatic age-based deletion in the current release and remain until separately handled or reviewed in response to a verified request.
- Restricted operational and deployment backups may contain previous records. There is currently no verified automatic maximum retention period for those backups or infrastructure logs; the live-database cleanup job does not erase them. Account and personal-data deletion requests require a separate manual review.
9. Security
We use HTTPS, secure and HTTP-only session cookies, access controls, prepared database queries, rate limits, hashed security identifiers, restricted server configuration files and other reasonable safeguards. No internet service can guarantee absolute security.
10. Player choices and rights
Depending on applicable law, players may request access, correction, deletion, restriction or portability of personal information, or object to certain processing. Players can sign out, delete their own comments, remove custom music in settings or clear website data in their browser. Clearing local data does not delete server-account records; signing out does not delete either kind of record.
To request account or personal-data deletion, email info@badmole.com from the account email address. We may take reasonable steps to verify the request and review affected live records, public content and backup limitations. There is currently no self-service account-deletion endpoint or automated request-completion workflow. We will communicate the scope and handling of a verified request subject to applicable law; we do not claim a tested automatic 30-day completion period. Removing an app connection in your Google Account, if any exists, does not delete Bad Mole server records.
11. Children
Bad Mole is a general-audience casual game and is not intentionally directed to children below the minimum age at which they may independently consent to online data processing in their country. If we learn that personal information was collected from a child without required authorization, we will take reasonable steps to delete it.
12. Prohibited harmful use
Bad Mole does not create, host, distribute, promote or facilitate non-consensual intimate imagery, including AI-generated non-consensual intimate imagery. Google APIs are not used for any such purpose.
13. Changes to this policy
We may update this policy when the game, account system, service providers or legal requirements change. The current version and update date will remain available at this address. Material changes will be communicated through the website or game where appropriate.
14. Contact
For privacy, Google Sign-In, account or deletion questions, contact:
Bad Mole development team
info@badmole.com
https://www.badmole.com/