Privacy

Last updated 5 September 2026. BuniFun is operated from Nigeria and hosted in Germany.

The short version#

If you read nothing else.

We keep what the product needs: an account, your votes, what you post, and enough about the request to stop abuse. Nothing else.
Your votes are public in aggregate: a session result shows totals. It does not show who voted which way.
We do not sell your data: and we do not run advertising profiles on it.
You can get it deleted: Email privacy@bunifun.online and we remove your account and personal data.

What we collect#

Grouped by why it exists.

To give you an account

Email address: how you sign in, and the only way we can reach you about your account.
Display name and profile picture: shown next to what you post. You choose both; pictures are optional.
Google account basics: if you sign in with Google we receive your email address, name and profile picture — nothing else. We never receive your password, and we do not request access to Gmail, Drive, contacts or any other Google service.

Because you used the product

Your votes: which session, and what you chose.
What you write: chat messages, comments, reasons attached to a vote, and reports you file.
Sessions you host: and the settings you gave them.
Images you upload: avatars and session artwork.

To keep the platform honest

A one-way hash of your IP address: we store a fingerprint, not the address itself, so that a thousand votes from one machine can be recognised as one machine. It cannot be reversed back into an address.
Your network operator: the number identifying your internet provider, not your location. Fifty votes from one network is one person with a script; fifty from ten networks is a conversation. That distinction is the whole control.
When your account was created: a brand-new account voting in a contested session is worth weighing differently from an old one.
Server logs: the address a request came from, what it asked for, and when. Kept briefly and used to stop abuse and diagnose faults.

We do not collect your precise location, we do not read your contacts, and we do not track you across other websites.

Why we are allowed to#

The lawful bases, plainly.

To provide what you asked for: an account, a vote, a message. Without this data there is no product.
Our legitimate interest in a platform that is not gamed: the integrity signals above. We rate real people, so manipulation is not a nuisance, it is a harm.
Your consent, where we ask for it: notifications and analytics. Both are optional and both can be withdrawn.
Legal obligation: where the law requires us to keep or produce something.

What is public#

Worth being exact about, because it cannot be undone by us alone.

Your display name, picture, what you post, and the sessions you host are visible to anyone. Session results are public and permanent — a closed session’s outcome is written once and never recomputed, which is what makes the numbers trustworthy.

Individual votes are not shown. A result reports totals, never who chose what.

If you delete your account we remove your personal data, but content already quoted, screenshotted or shared by other people is beyond our reach, and a result that has been published stays published with your identity removed.

How long we keep it#

Your account: until you ask us to delete it.
Votes and results: indefinitely, in the aggregate that forms a published result.
Chat and comments: until deleted by you or by moderation.
Server logs: about 30 days.
Backups: up to 30 days, after which deleted data is gone from those too.

What you can ask us to do#

Email us and we will do it.

See it: a copy of the personal data we hold about you.
Fix it: correct anything wrong.
Delete it: your account and personal data.
Object: to the processing based on our legitimate interest.
Withdraw consent: for notifications or analytics, at any time, in Settings.

Write to privacy@bunifun.online. We aim to answer within 30 days.

Where your data lives#

Our servers are in Germany and our analytics are in the EU. If you are in Nigeria, this means your data is processed outside the country, under European data protection law, which sets a standard at least as high as the NDPR requires.

Age#

BuniFun is not for under-16s. We do not knowingly collect data from anyone younger, and we delete such an account when we learn of it.

Changes#

If we change this in a way that matters, we will say so in the product before it takes effect — not only by editing the date at the top of this page.