Privacy Policy

Busted Minds Account provides sign-in, account recovery, and identity federation for Busted Minds services, including Busted Minds Chess and Busted Minds AI. Each connected service may have an additional privacy policy covering its own content and activity data.

• Account information: email address, username, display name, avatar, account identifiers, authentication methods, confirmation status, and security-related timestamps.
• Authentication information: session identifiers, provider identifiers, login events, recovery events, and technical information needed to prevent abuse and keep sessions secure.
• Support information: messages and contact information you provide when requesting help or exercising a privacy right.

When you choose Google, we request only the OpenID identifier, email address, name, and basic profile image needed to create or access your Busted Minds Account. We do not request access to Google Drive, Contacts, Calendar, Gmail, or other unrelated Google services.

Google authentication is handled by the central Busted Minds Account service. Connected apps receive only the approved Busted Minds identity claims needed to establish their own session; they do not receive your Google password or Google access token.

• Create, authenticate, recover, secure, and administer your Busted Minds Account.
• Keep one consistent identity across connected experiences you approve.
• Provide verified identity claims such as account ID, email, and basic profile information to a connected Busted Minds service after authorization.
• Detect abuse, investigate security events, enforce service rules, and comply with legal obligations.
• Respond to support and privacy requests and improve account reliability.

Busted Minds Chess and Busted Minds AI use the same central identity but maintain separate application databases. Chess activity is not automatically added to AI conversation history, and AI conversations are not automatically added to your Chess profile.

During authorization, the Accounts service shows the connected service and requested permissions. You may decline instead of continuing.

We use Supabase for authentication and account storage, Vercel for application hosting, Resend for authentication email delivery, and Google when you choose Google sign-in. These providers process information as necessary to deliver their services under their respective terms and data-protection commitments.

We do not sell personal information or Google user data, and we do not use central account information for third-party behavioral advertising. We may disclose limited information when required by law, to protect users or the service, during a business reorganization with appropriate safeguards, or at your direction.

We retain central account information while your account is active and as reasonably necessary for security, dispute resolution, legal compliance, and service integrity. Backup copies may remain until they expire through provider retention cycles.

We use encrypted transport, restricted database policies, protected secrets, authorization checks, rate limits, and secure session cookies. No online service can guarantee absolute security.

You may use email and password instead of Google where available, sign out, update eligible account details, or request access, correction, deletion, restriction, portability, or objection where applicable law provides those rights. Removing a connected sign-in method may require another verified method so you do not lose access.

Send requests from the email associated with your account to bustedminds1@gmail.com. We may need to verify your identity without asking for your password.

The service is not directed to children under 13, or a higher minimum age required by local law without appropriate guardian authorization. Providers may process information in countries other than your own using their available legal safeguards.

We may update this policy as Busted Minds Account evolves. Material changes will receive an updated effective date and, where appropriate, additional notice. See the Terms of Service for the rules governing account use.