Privacy Statement

Quick Summary

• Games first. The games are designed for family play and do not need sensitive personal data.
• Google login. If sign-in is enabled, we use Google only to identify the signed-in user.
• Stripe billing. Paid subscriptions are processed by Stripe; we do not store full card numbers.
• No sale of data. We do not sell personal data or use it for third-party advertising.

Who We Are

The data user/controller for this website is Bunny Innovation. For privacy questions, access requests, correction requests, deletion requests, or consent withdrawal requests, contact us at info@bunnyinnovation.com.

Personal Data We May Collect

Depending on how the website is used, we may collect:

• Google sign-in data: Google account identifier, name, email address, and profile image, if you choose to sign in with Google.
• Membership and billing data: free trial dates, subscription status, Stripe customer/subscription identifiers, and payment status.
• Game and session data: selected game, score, game status, login session status, and basic preferences needed to run the games.
• Technical data: IP address, device/browser type, pages requested, timestamps, and security logs generated by our hosting server.
• Messages you send us: contact details and the contents of your privacy or support request.

We do not intentionally collect government identity numbers, full payment card details, precise location data, or special category/sensitive data through the games.

Why We Use Personal Data

We use personal data only for purposes connected with Bunny Games:

• to let users sign in and access the games;
• to provide the free trial, subscription access, payment checkout, and billing management;
• to operate game sessions, scores, and basic app features;
• to keep the website secure, diagnose errors, prevent misuse, and maintain service reliability;
• to respond to privacy, support, or legal requests; and
• to comply with applicable laws and regulatory obligations.

Legal Basis

Where GDPR applies, our legal bases may include performance of a service requested by you, legitimate interests in operating and securing the website, consent where required for optional features, and compliance with legal obligations. Where Hong Kong law applies, we collect personal data by lawful and fair means, use it for stated or directly related purposes, and keep it no longer than necessary.

Children and Families

Bunny Games is designed for toddlers and young children to play with a parent, guardian, teacher, or caregiver. We do not knowingly ask children to provide personal contact information directly. If Google login is used, it should be completed by a parent, guardian, or authorised adult. If you believe a child has provided personal data without appropriate permission, contact us and we will take reasonable steps to delete it.

Cookies and Local Storage

We may use essential cookies or browser storage to keep a user signed in, remember basic game state, and protect the service. We do not use Bunny Games for behavioural advertising. If analytics or optional cookies are added later, we will update this statement and provide any consent controls required by law.

Sharing and Service Providers

We may share limited data with service providers that help us run the website, including:

• Google, for Google sign-in authentication;
• Stripe, for subscription checkout, payment processing, billing records, and customer billing management;
• hosting and infrastructure providers, for website delivery, logging, and security; and
• professional advisers or authorities, where required for legal, safety, or regulatory reasons.

We do not sell personal data.

International Transfers

Our website is available online and our service providers may process data in Hong Kong, the European Economic Area, the United States, Singapore, or other locations. Where required, we use appropriate safeguards and limit transfers to what is necessary to provide and secure the service.

Retention

We keep personal data only as long as needed for the purposes described above. Login account data is kept while the account or service relationship remains active, unless deletion is requested or a longer period is required by law. Security and server logs are normally kept for a limited period and may be retained longer if needed to investigate abuse, security incidents, or legal claims.

Your Rights

You may contact us to request access to or correction of your personal data. Where GDPR applies, you may also have rights to:

• delete personal data;
• restrict or object to processing;
• receive a portable copy of data you provided;
• withdraw consent where processing is based on consent; and
• complain to your local data protection supervisory authority.

Hong Kong users may also contact the Office of the Privacy Commissioner for Personal Data if they have concerns about personal data handling.

Security

We use reasonable technical and organisational measures designed to protect personal data from unauthorised or accidental access, processing, erasure, loss, or use. No online service can guarantee absolute security, so we keep our practices under review as the site changes.

Changes to This Statement

We may update this Privacy Statement when the games, login features, service providers, or legal requirements change. The updated version will be posted on this page with a new effective date.