Privacy policy
Very Bad Games (www.veryb.ad) · effective 2 September 2026 · contact: remy@veryb.ad
HALL PASS is a game. It has no accounts, asks for no name or email, and does not sell your data. This page says exactly what leaves your device and why, in the order you are likely to meet it.
What the game keeps on your device
Your progress — students, fragments, cleared rooms, settings — is saved in the app's own storage (or your browser's, on the web). It stays there unless you use the CLUB CARD.
The club card (cloud saves)
When you first play, the game mints a random code — your CLUB CARD — and syncs your progress under it to our database (hosted by Supabase). The code is the only key; it is not linked to your name, email, device or account. Anyone who types your code can load your progress, so keep it private. To delete a cloud save, email us the code and we will erase it.
Purchases (RevenueCat)
The app version sells one supporter purchase and packs of fragments through the App Store or Google Play. Purchases are processed by the store and recorded by RevenueCat, our purchase service, against your club card code so that a purchase follows your save to another device. RevenueCat receives the store receipt, your platform and device type, and the club card code. It does not receive your name or payment details — the store keeps those. RevenueCat's policy: https://www.revenuecat.com/privacy
Ads (Google AdMob)
The app version shows ads in two places: an optional rewarded ad on the death screen, and one short ad between hours of the night (never for supporters). Ads are served by Google AdMob. To serve and measure ads, Google receives your device's advertising identifier, an approximate location derived from your IP address, and information about the ads you see and tap. On iOS the app asks for permission before using the advertising identifier for tracking; if you decline, you still get ads, but non-personalised ones. In regions that require it, a consent form is shown before any ad loads. You can reset or limit your advertising identifier in your device settings. Google's policy: https://policies.google.com/privacy and https://support.google.com/admob/answer/6128543
We also share with RevenueCat which ads were shown and what they earned, so that our purchase and ad revenue are reported in one place. That report carries the ad unit, the placement in the game, and the revenue figure — not your identity.
Notifications (OneSignal)
If you allow notifications, the app registers a push token with OneSignal so we can send one daily message when Tonight's Run goes live at 9 PM your time, and occasionally news about the game. OneSignal receives the push token, device model and OS version, your time zone, and progress tags such as the furthest hour you have reached. Turn notifications off in your device settings at any time. OneSignal's policy: https://onesignal.com/privacy_policy
Field reports
The FIELD REPORT button sends the text you type, plus the game version and basic device details, to a form we read (Netlify Forms). Reports are anonymous: there is no name or contact box, and your CLUB CARD code is deliberately not attached, so a report cannot be tied to you, to your save, or to anything you have bought. That also means we cannot reply to one. If you want an answer, use the public board at hallpass.cc/feedback instead. Do not include personal information in a report; if you do, email us and we will delete it.
Analytics (PostHog)
The game counts what happens in it, so we can see which rooms stop people and whether the optional purchases are wanted or ignored. Those counts go to PostHog, hosted in the United States. An event is a line like "a run ended on the roof at 6 minutes" or "a Second Heart was bought" — never a name, an email, or an account. The id attached to them is your CLUB CARD code, the same anonymous code your save already uses, so one player on a phone and a laptop is not counted as two people.
Three more things ride along, all of them about the software rather than you: one page view when the game opens, with the page you arrived on and where you came from (the referring site, or the ad campaign in the link), so we know which of our own efforts bring people here; how fast the page loaded (the standard Core Web Vitals); and how smoothly each run played — frame rate, stalls, and a device model such as "Pixel 8" or "iPhone" — so a phone that struggles gets fixed. Your IP address is used by PostHog to place you in a country and is not stored by us.
We have deliberately turned off the two features that would collect more: there is no session recording, and no automatic capture of everything you tap. Only the named events above are sent.
The club's one question. Sometimes, back at the Deck after a run, the game asks one tap about that run (was the boss, the room or the period too easy, just right, too hard). Your answer is one analytics event with the same run facts as above, no free text, and the question only appears while Gameplay Analytics is on.
Turning it off. Options → Club → Gameplay Analytics, in the game. Switching it off stops collection immediately and clears the local id; the code that does the collecting is not even loaded the next time the game starts. Nothing else about the game changes. PostHog's policy: https://posthog.com/privacy
There is no social login, and no other analytics of any kind. The only third parties are the four named on this page, each for the single purpose described.
Children
HALL PASS is not directed at children under 13 and does not knowingly collect data from them.
Changes
If this policy changes, the date at the top changes and the new version is posted at https://hallpass.cc/privacy.