Privacy Policy

Effective Date: April 3, 2026

This policy explains how Bunny Trail ("we", "us", "our") collects, uses, and protects your information when you use our virtual Easter Egg Hunt application.

Information We Collect

• Player Name: A nickname or alias you choose. This can be anything safe-for-work — your real name, a fun handle, or any identifier you prefer. Stored in your browser's local storage only.
• Player ID: A randomly generated identifier stored in your browser to persist your game session. Not linked to your identity.
• Geolocation Data: Your device's latitude and longitude are collected only while the play page is open and active, with your explicit permission via the browser's geolocation prompt. GPS data is used to show your position on the map, verify you are within the play zone, and enforce geofence boundaries. We do not track your location when the app is closed, in the background, or outside of active gameplay. GPS coordinates are overwritten with each position update and deleted when the trail is reset.
• Organizer Email: If you sign in via Google OAuth, your email address and Google profile name are stored for authentication and displayed to platform administrators.

Cookies We Set

Cookie	Purpose	Duration
eventID	Identifies the current game event	1 year
user_email	Admin session (OAuth login)	24 hours
user_email_sig	Cookie integrity verification	Session

Player name and player ID are stored in your browser's local storage, not as cookies.

How We Use Your Information

• To assign you randomized eggs and track your progress during the game.
• To record which eggs you find and the time taken for leaderboard ranking.
• To enforce the defined play zone boundaries.
• For administrative functions such as egg management and game resets.

Third-Party Services

We use the following third-party services which may receive your IP address, User-Agent, and referrer information:

• Mapbox — map tiles and satellite imagery. Privacy Policy.
• Google OAuth — organizer/admin authentication via your Google account.
• jsDelivr CDN — delivers Bootstrap CSS/JS library files.
• Demeterics — LLM analysis for feedback triage (organizer/admin feedback only, no player data).

Children's Privacy (COPPA Compliance)

Bunny Trail is not directed at children under 13. We do not knowingly collect personal information from children under 13 without verified parental consent. Children under 13 may only use Bunny Trail under the direct, in-person supervision of a parent or legal guardian. The parent or guardian is responsible for the child's safety during outdoor gameplay.

If you believe a child under 13 has provided us personal data without parental consent, contact us immediately at privacy@bunny-trail.net and we will delete the data promptly.

Parents should review our Parent Phone Setup Guide and Safety Rules before allowing children to participate.

Safety and Physical Activity

Bunny Trail involves outdoor physical activity using GPS. Players should be aware of their surroundings at all times. We are not responsible for injuries, property damage, or other harm sustained during gameplay. Trail organizers are responsible for ensuring egg locations are in safe, publicly accessible areas. See our Safety Rules and Terms of Service for details.

Data Retention

Gameplay data (found eggs, timestamps) is stored in Google Cloud Datastore until an organizer performs a game reset. Player GPS coordinates are stored temporarily during active gameplay and overwritten with each position update. All player data (positions, progress, found eggs) is deleted when an organizer resets the trail. Data in your browser's local storage remains until you clear it.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us. To delete your local data, clear your browser's local storage for this site. California residents have additional rights under the CCPA — contact us to exercise them.

Contact Us

If you have questions about this Privacy Policy, contact us at privacy@bunny-trail.net.