Bad decisions.
Clear boundaries.
Here’s what this web game saves, why it saves it, and what you control.
Applies to terribledecisions.app · Updated November 4, 2026What we save
- Account & sign-in
- Supabase stores your email, account ID and authentication records. Resend delivers your email codes. Your display name is derived from your email; it isn’t a separate public profile.
- Your game
- Cloudflare D1 stores your points, daily attempts, streak history, unfinished cases and decisions, discovered endings, chosen title, Plus-preview preference and HR appeals. This keeps your record consistent across devices. These records stay until you delete your account; older history may be compacted by the game.
- Optional usage counts
- First-party events measure active days, return visits, case starts and outcomes, early cash-outs, archive interest, and appeals and recovered points. A pseudonymous account code connects events; it is not anonymous. These events don’t include your email, name, detailed choices, IP address or a device fingerprint.
- Feedback you send
- The owner can read your category, note, screen and case context. An account code enforces the sending limit; your name and email are not attached. Please don’t put personal or sensitive information in the note.
Usage counting is your choice
You can turn it off under Usage & privacy in the game. It stops future optional events, not essential account verification or game saves. Browser Do Not Track and Global Privacy Control signals also suppress these events. Turning it off doesn’t delete existing events.
Usage events and feedback have a 90-day retention window. Entries older than that are removed when the next beta activity runs, so cleanup isn’t a scheduled midnight deletion. Your preference remains saved while your account exists.
Open usage settings →What stays in your browser
Essential, HttpOnly cookies keep you signed in; refresh cookies can last up to 30 days. A temporary session-storage entry may hold your account email and an unconfirmed save request so a failed connection doesn’t lose a decision. It is cleared when the save resolves or this browser signs out.
If you start account deletion, a protected receipt cookie lets the same browser check or retry it for up to 30 days. Earlier prototype progress may also remain in local storage; it isn’t uploaded into your account automatically. Clearing site data in your browser removes these local copies but does not delete your server account.
The game is web-based. No installation or push-notification permission is needed.
Who handles the data
The game owner operates Terrible Decisions. Cloudflare hosts the site, game records and rate limiting. Supabase handles authentication. Resend delivers sign-in and confirmation emails. Technical request information, such as IP addresses, can be processed by these providers for delivery, security and abuse prevention—even though our optional game events don’t store it.
Provider privacy information: Cloudflare, Supabase and Resend. We don’t add advertising trackers or session-replay tools. If you choose to share a result, the destination app or service handles what you share under its own policies.
Leave without leaving a player file
Account deletion requires a new email code and an explicit confirmation. It permanently removes your Terrible Decisions sign-in account, saved game, usage preference, linked usage events and feedback. It does not affect other players or accounts in other apps.
A minimal deletion record—account ID, pseudonymous usage code, hashed receipt, status and timestamps—is kept to block late writes and let you retry safely. After completion, it becomes eligible for removal after 30 days and is cleaned up on the next deletion-service request. An incomplete deletion record stays until the provider step can be completed.
Provider backups and security, authentication or email-delivery logs may remain under those providers’ retention policies. Deletion is not a promise of instant removal from every backup or log, and can’t remove a result you already shared elsewhere. If a provider is unavailable, the page shows what is still pending instead of claiming success.
Review account deletion →Nothing is deleted by opening this page. There is no paid subscription in the current free Plus preview.
Questions about your data?
Use Give feedback in the game to send the owner a privacy question; sign-in is required. Don’t include passwords, sign-in codes or sensitive documents. You can read this notice without an account.