Privacy

We keep what the product needs

an account, your votes, what you post, and enough about the request to stop abuse. Nothing else.

Your votes are public in aggregate

a session result shows totals. It does not show who voted which way.

We do not sell your data

and we do not run advertising profiles on it.

We count visits ourselves

first-party analytics on our own servers, no IP addresses stored. A visitor id is kept on your device only if you say yes.

You can get it deleted

Email privacy@bunifun.online and we remove your account and personal data.

To give you an account

Email address

how you sign in, and the only way we can reach you about your account.

Display name and profile picture

shown next to what you post. You choose both; pictures are optional.

Google account basics

if you sign in with Google we receive your email address, name and profile picture — nothing else. We never receive your password, and we do not request access to Gmail, Drive, contacts or any other Google service.

Because you used the product

Your votes

which session, and what you chose.

What you write

chat messages, comments, reasons attached to a vote, and reports you file.

Sessions you host

and the settings you gave them.

Images you upload

avatars and session artwork.

To keep the platform honest

A one-way hash of your IP address

we store a fingerprint, not the address itself, so that a thousand votes from one machine can be recognised as one machine. It cannot be reversed back into an address.

Your network operator

the number identifying your internet provider, not your location. Fifty votes from one network is one person with a script; fifty from ten networks is a conversation. That distinction is the whole control.

When your account was created

a brand-new account voting in a contested session is worth weighing differently from an old one.

Server logs

the address a request came from, what it asked for, and when. Kept briefly and used to stop abuse and diagnose faults.

We do not collect your precise location, we do not read your contacts, and we do not track you across other websites.

To provide what you asked for

an account, a vote, a message. Without this data there is no product.

Our legitimate interest in a platform that is not gamed

the integrity signals above. We rate real people, so manipulation is not a nuisance, it is a harm.

Your consent, where we ask for it

notifications and analytics. Both are optional and both can be withdrawn.

Legal obligation

where the law requires us to keep or produce something.

Google

only if you choose to sign in with Google. They tell us your email, name and picture.

Resend

sends your sign-in codes. They process your email address to deliver the message.

Cloudflare

serves the site and stores uploaded images. They see requests in transit.

Hetzner

hosts the servers in Germany.

Vercel

serves the website.

Sentry

error reports when something breaks.

Smile ID

only if you apply for Buni Verified. They capture your ID document and selfie in their own secure page and check them. See Identity checks, below.

Paystack

only if you subscribe to Buni Verified. They take the payment; your card details go to them and never to us.

We do not sell your personal data, and we do not share it for anyone else’s advertising.

We count visits to see what brings people here — which links, campaigns and pages lead to people voting and coming back. Your browser or the app sends us the page or screen you opened, the campaign tags in the link you arrived by (such as utm_source), the site that sent you, your screen size, language and time zone, and actions like voting, posting or joining a room. Your city and country come from our network provider’s request headers. We never store your IP address in analytics, and never your email, name or what you wrote.

A visitor id only if you allow it. The first time you visit we ask. If you accept, we keep a random id on your device (in your browser’s storage, or the app’s secure storage) so a visit next week can be recognised as the same visitor, and send it with your requests to us. If you decline, or have not answered, visits are still counted, but anonymously: nothing is stored and no visit is joined to another. If your browser sends Do Not Track or Global Privacy Control, we treat that as a no. Your answer itself is counted, without an id.

Change your mind any time under Settings → Usage analytics (in the app, on the You tab). Turning it off deletes the id from your device. If you delete your account, its analytics records are deleted or detached from you. Raw events are kept for 13 months.

When you open a session we record that it was seen once by one viewer. For a signed-in account the viewer is the account; otherwise it is a random id your browser keeps. We store only a keyed hash of that id — never your IP address, your device details or your account id — so a view cannot be traced back to you without our key. Hosts see totals: views, unique and returning viewers. Nobody sees who viewed what.

If your browser sends Do Not Track, no view is recorded. Clearing your site data gives you a new random id.

The photo of your ID and your selfie are taken inside Smile ID’s own page and sent to them, not to us. We never receive or keep either image, or your ID number.

We keep: whether the check passed, the name printed on the document (because your display name is matched against it), the kind of document and its country, and when it happened. The name on the document is seen by staff only when your display name did not match it and a person has to decide. It is never shown publicly — what is public is the badge.

The lawful basis is your consent, given when you start the check. Close your account and this record goes with it. Payment for the membership is taken by Paystack; we keep the subscription’s state and dates, never card details.

Your display name, picture, what you post, and the sessions you host are visible to anyone. Session results are public and permanent — a closed session’s outcome is written once and never recomputed, which is what makes the numbers trustworthy.

Individual votes are not shown. A result reports totals, never who chose what.

If you delete your account we remove your personal data, but content already quoted, screenshotted or shared by other people is beyond our reach, and a result that has been published stays published with your identity removed.

Your account

until you ask us to delete it.

Votes and results

indefinitely, in the aggregate that forms a published result.

Chat and comments

until deleted by you or by moderation.

Server logs

about 30 days.

Backups

up to 30 days, after which deleted data is gone from those too.

See it

a copy of the personal data we hold about you.

Fix it

correct anything wrong.

Delete it

your account and personal data.

Object

to the processing based on our legitimate interest.

Withdraw consent

for notifications or analytics, at any time, in Settings.

Write to privacy@bunifun.online. We aim to answer within 30 days.

Our servers are in Germany and our analytics are in the EU. If you are in Nigeria, this means your data is processed outside the country, under European data protection law, which sets a standard at least as high as the NDPR requires.

BuniFun is not for under-16s. We do not knowingly collect data from anyone younger, and we delete such an account when we learn of it.

If we change this in a way that matters, we will say so in the product before it takes effect — not only by editing the date at the top of this page.