Privacy Policy

EFFECTIVE DATE: April 14, 2026

Welcome to baddies.cc ("Company", "we", "our", "us"). We respect your privacy and are deeply committed to protecting it through strict compliance with this policy. This policy describes the types of information we may collect from you or that you may provide when you visit the website baddies.cc (our "Website") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

Because our platform heavily emphasizes creating a safe digital haven strictly for biological women, our data minimization protocols operate incredibly aggressively. Privacy is not a feature here; it is the entire foundation.

1. Data Collection & Minimization

We actively practice strict data minimization protocols. We collect only what is absolutely essential for the service functioning securely:

• Account Data: We require your full name, birthdate, country, and email address to set up, secure, and manage your account. This establishes a baseline contact channel for the application process.
• Verification Data: We require a uniquely generated 12-letter verification code accompanied by a verification selfie capturing your face and the code. We strictly do not request, require, or store any government-issued IDs. All verification selfie imagery and associated temporary verification session data is scrubbed from our systems and permanently digitally shredded immediately upon the completion of our 7-day manual review process.
• Encrypted File Data: The files, folders, and arrays you upload are secured remotely using military-grade AES-256 end-to-end encryption. Because the encryption keys are scoped locally to user sessions, our DevOps team cannot view, access, or decipher the content, filename, or metadata of your files under any circumstances.
• Usage Data: We log standard aggregate technical information (such as gross server bandwidth metrics, general storage thresholds, and generic error stacks) purely to perform infrastructure maintenance and scale resources. We do not use third-party tracking cookies or behavior-monitoring scripts. No Google Analytics. No Meta Pixels.

2. Data Processing & The Manual Review Lifecycle

We process your application strictly for the sole purpose of validating biological female identity to uphold our Terms of Service. Processing operates under the following pipeline:

1. Upon application, your selfie and data enter a temporarily sandboxed cache exclusively accessible to our vetted, internal all-female Review Board.
2. Within 7 days, a human reviewer compares the generated UUID in your photo to your session database record.
3. A determination is made. Validation triggers account generation; rejection triggers denial.
4. Regardless of the outcome, the sandbox cache is wiped clean. Your imagery evaporates permanently.

3. Zero Selling & Third-Party Non-Disclosure

Our business model is radically independent. We do not, will not, and have never sold your personal data. baddies.cc operates entirely via anonymous private donations, corporate grants targeting women in technology, and private sponsorships. This funding model completely decouples us from the advertising industry.

Consequently, we do not package, lease, sell, or willfully share your email addresses or identifiable data with third parties, ad networks, or data brokers. Your identity remains entirely within our ecosystem.

4. Subpoenas & Legal Demands

While we advocate for ultimate privacy, baddies.cc complies with binding legal subpoenas and valid warrants issued by recognized jurisdictions. However, due to our zero-knowledge architecture regarding your Vault data and our aggressive data-wiping policy regarding verification selfies, extremely limited actionable information is available to law enforcement upon request.

5. Data Retention & Right to be Forgotten

Account identifiers (Name, Email, Birthdate, Country) remain active as long as your account remains open. You have the absolute right to demand full deletion of your record ("Right to be Forgotten"). Through your account dashboard, you can trigger an immediate, unrecoverable account wipe. Doing so instantly shreds all user metadata and permanently bricks the encryption keys to your files, rendering them completely inaccessible.

6. Children Under Age 13

Our Website relies on legal consent. Our Website is not intended for children under 13 years of age. No one under age 13 may provide any information to or on the Website. We do not knowingly collect personal information from children under 13. If we learn we have collected or received personal information from a child under 13, we will immediately delete that information.

7. Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this specific page. If we make material changes to how we treat our users' personal information, we will notify you by email to the email address specified in your account. The date the privacy policy was last revised is identified at the top of the page.

8. Contact Information

To ask questions, submit feedback, or issue formally recognized data requests under GDPR, CCPA, or applicable regional frameworks concerning this privacy policy and our privacy practices, contact our Data Protection Officer at: privacy@baddies.cc.