Broken Bot PRIVACY POLICY

Privacy Policy

EFFECTIVE AUGUST 10, 2026

Broken Bot is run by Yulia Winslow, an individual based in New York, USA (“I” or “me”), and is part of Terra Incognita. This policy explains what data Broken Bot (brokenbot.games) collects, why, who it's shared with, and the choices you have.

WHO BROKEN BOT IS FOR

Broken Bot is for people aged 18 or older. It isn't directed at children, and I don't knowingly collect data from anyone under 18.

THE DATA I COLLECT

What's needed for Broken Bot to function and develop:

ACCOUNT DETAILS

Your email address and a password, used to create and access your account. Passwords are handled by the authentication provider and stored in hashed form — I never see your actual password.

GAME DATA

What you type during a round with an AI scoop. Records of which game material you've already seen, so it isn't repeated. Per-round logs: timing, completion, the card generated for that round, the scoop's observations, and the choices you make about how a round runs — including turning the timer off or on mid-round, and when. In rounds without an AI scoop your reactions aren't recorded — only that the round happened, how long it took, and the timer choices you made.

PAYMENT DATA

If you buy access, payment is processed by Stripe. I receive confirmation that a payment succeeded and basic subscription status, but I never receive or store your full card number.

MESSAGES YOU SEND

If you use the contact form or send feedback from inside the site, I receive what you submit — for the contact form, your name, email and message.

BASIC USAGE DATA

Standard analytics about how the site is used (e.g., pages viewed, approximate region, device/browser type), collected through Google Analytics. A value called bb_session is stored in your browser to keep you signed in and track how many free rounds you've used; it stays on your device.

WHY I COLLECT DATA

To create your account, sign you in, and keep you signed in. To run rounds, avoid repeating material you've already seen, and produce your card and your AI scoop. To enforce free-round limits and process paid access. To understand, in aggregate, how the site is used and to improve it. To answer messages you send. To study associative and cognitive patterns — the core research purpose of Terra Incognita. What I learn from Research Data informs how I improve Broken Bot and the user experience, and how I design new games and related products, including ones I may offer commercially to individuals or organizations. Where this analysis is tied to your account, it is treated as personal data under this policy.

RESEARCH DATA

“Research Data” means the gameplay data used for the core research purpose of Terra Incognita: everything you type during a round with an AI scoop. Before your first AI-scoop round you're asked to acknowledge this, and that acknowledgment is recorded on your account.

WHO IT'S SHARED WITH

I don't sell your data and I don't show ads. I use a small number of service providers (“processors”) that handle data on my behalf so the product can function:

SUPABASEStores your account, game data, and logs (the database and authentication).
ANTHROPIC (CLAUDE API)Receives what you type during an AI-scoop round to generate the scoop's observations, and generates the title on your card. These are sent for processing and are not used to train models when sent through the API.
STRIPEProcesses payments.
NETLIFYHosts the site and runs the serverless functions; form submissions are delivered through Netlify.
GOOGLE ANALYTICSProvides aggregate usage statistics.

I may also disclose data if required by law, or to protect the rights, safety, or security of users or the service.

AGGREGATED AND DE-IDENTIFIED DATA

I use aggregated and de-identified data — information that doesn't identify you and can't reasonably be linked back to you, including Research Data once it has been de-identified — to understand patterns, build and improve games and products, create new offerings (including commercial ones), and illustrate ideas in materials such as presentations, pitches, talks, or publications. This may include anonymized examples of response patterns, described so that no individual can be identified. I don't sell your personal data, and I don't share your name, email, or other identifying information with third parties for their own purposes.

WHERE DATA IS PROCESSED

These providers may process and store data in the United States and other countries. By using Broken Bot, you understand your data may be transferred to and processed in countries that may have different data-protection rules than where you live.

HOW LONG IT'S KEPT

Account and game data is kept while your account is active. If you delete your account, the associated logs and responses are deleted or anonymized. Messages you send are kept as long as needed to handle your request. Aggregate analytics that can't identify you may be retained.

YOUR CHOICES AND RIGHTS

You can ask to access, correct, or delete your personal data, or to close your account, by writing to info@theoryofvalues.com. Depending on where you live, you may have additional rights under laws such as the GDPR (EU/UK) or US state privacy laws, including the right to object to or restrict certain processing. I'll respond to reasonable requests. You can use most of the site without analytics by using your browser's tracking controls.

SECURITY

I take reasonable measures to protect your data, and the providers above maintain their own security practices. No method of transmission or storage is perfectly secure, so I can't guarantee absolute security.

NOT MEDICAL OR PSYCHOLOGICAL ADVICE

Broken Bot is a research and entertainment tool. The material it shows you and the AI scoop it produces are not medical, psychological, or therapeutic advice, and are not a substitute for care from a qualified professional.

CHANGES TO THIS POLICY

I may update this policy as the product changes. The effective date above shows the latest version. Material changes will be reflected here.

CONTACT

Questions about privacy: info@theoryofvalues.com.