Privacy Policy

1. Introduction

Bunnimade Bakery respects your privacy. This policy explains how we handle information when you visit the website, create or use an account, design a cake, or place an online cake order.

2. Information we collect

Depending on how you use the website, we may process:

• Account information: username, name, email or phone number, hashed password, sign-in methods, and login timestamps.
• Google Login information: Google account identifier, verified email, display name, and profile picture.
• Order and delivery information: recipient name, account email, phone number, address, district or area, delivery time, notes, items, quantities, cake design details, custom images, voucher, prices, delivery fee, payment method, payment reference, and order status.
• Text entered into the chatbot or cake design assistant and the current cake configuration needed to prepare a suggestion.
• Technical and usage data produced through the login session, browser storage, and Google Analytics 4, such as browser, device, and page interaction information.

3. Google Login

Bunnimade supports Google Login through Google Identity Services. We use only basic sign-in information corresponding to the openid, email, and profile scopes: your Google identifier, verified email, name, and profile picture. We use this information to authenticate you and create, link, or manage your Bunnimade account.

Bunnimade does not receive your Google password and does not request access to Gmail, Google Drive, Google Calendar, or Google Contacts.

4. How we use information

We use information to register and sign users in; manage accounts; create, confirm, prepare, deliver, and track orders; contact customers about orders; save cake designs; provide support; protect the website; synchronize operational records; analyze usage; and improve the experience.

5. Cookies, sessions, and analytics

The website uses a security session cookie to keep you signed in. A session may remain active for up to 30 days; the cookie is configured as HttpOnly and SameSite=Lax, and is transmitted only over HTTPS in production. Browser storage also retains your language choice and a limited cached copy of user information for the interface.

We use Google Analytics 4 (measurement ID G-B17Y1X91FM) to understand website usage. Google Analytics may set cookies or process technical data under Google's own policies.

6. Sharing and processors

We do not sell personal information. Data is accessed or transferred only as needed to operate the service, including authorized personnel and Google services used for sign-in, Analytics, operational synchronization through Google Sheets, and generative assistance for Cake Design when configured. Text and cake settings sent to the design assistant may be processed by Google Gemini to produce a suggestion. We may also disclose information when required by law or to protect legitimate rights and safety.

7. Storage and security

Account and order data is stored in Bunnimade's systems; selected operational records may be synchronized to Google Sheets. We use appropriate technical controls and access restrictions, but no electronic transmission or storage method is completely secure.

8. Retention

We keep information for as long as needed to provide the service, administer accounts and orders, resolve requests, protect the system, and meet legal obligations. The period depends on the data and purpose; one fixed retention period does not apply to every category.

9. Your rights and choices

You may contact us to request access, correction, or deletion where appropriate under applicable law and legitimate retention needs. The website does not currently provide a self-service Delete Account button. You can revoke Bunnimade's access from the third-party connections section of your Google Account; revocation does not automatically delete records already held by Bunnimade.

10. Third-party services and links

The website may link to Google, Facebook, TikTok, or other services. Your activity on those services is governed by their own policies. Bunnimade does not control third-party content or data practices.

11. Changes to this policy

We may update this policy when the service or legal requirements change. The date at the top identifies the latest version.

12. Contact

For privacy questions or requests, email bunnimadebakery@gmail.com.