Privacy

Last updated October 2026. How To Become A Baddie is run from Ontario, Canada.

What we collect

• Account: your email, an optional first name, your password (hashed; we can’t read it), your date of birth and your time zone.
• Date of birth: used for one thing: deciding which parts of the site you can see. We don’t make accounts for anyone under 13, and if you’re under 13 the sign-up form stores nothing.
• Your Meter: which challenges you picked and finished, when, and any private note you add. Only you see these.
• Courses: which courses you own. Stripe handles payment; we keep your Stripe customer id, never your card.
• Email list: your email address and where you signed up.
• Usage: a random session id (kept only until you close the browser) and the pages you visit, with no IP address or personal details. If Google Analytics is on, it sets its own cookies.

Sharing your Meter

Nothing about you is public until you press Share. Then the link shows your score, level, streak and first name (if you gave one). It never shows your challenges, your notes or your email.

Cookies

• payload-token: keeps you signed in.
• hq_sid: a session id for our own counts; gone when the browser closes.

Who we share with

Stripe (payments), Resend (sending email), our hosting provider, and Google Analytics if enabled. We don’t sell your data.

Your choices

Unsubscribe from any email with its link. Undo any challenge from your Meter. To delete your account or get a copy of your data, email hello@howtobecomeabaddie.com and we’ll do it within 30 days.