Privacy Policy
VECTOR — Bunny Hop · updated September 30, 2026
This is a translation provided for convenience. The original is in Portuguese, and if the two versions ever differ, the Portuguese version prevails.
This is a browser game, free and without ads. It stores the minimum needed for a leaderboard to exist, and nothing more. There are no trackers, no audience analytics and no advertising — neither our own nor third-party. This page describes exactly what happens to your data; if anything here is unclear, write to prof.martins.94@gmail.com.
Playing without an account
Solo practice needs no account at all (online play — Quick match, rooms and friends — needs the Google account described further down). Without signing in, everything that exists stays in your own browser, in localStorage:
| What | What for |
|---|---|
| Your best times on each map | showing your record on the map card |
| The nickname you chose | signing your runs on the leaderboard |
| A random number, generated in your browser | reserving the nickname for you. It identifies no one: it is a randomly drawn number, unrelated to your name, email or device |
| The path of your best run on each map | the “ghost” that runs beside you |
| A queue of runs not yet sent | not losing a time you set while you were offline |
| The game language you chose | opening the game in that language next time |
Clearing the site data in your browser deletes all of this at once, and the game keeps working as if it were your first visit.
What goes to the server
When you finish a course, the run is sent to the leaderboard with:
- the map, the time, the number of jumps and the top speed reached;
- the nickname you chose and the physics preset used (on mobile, the mobile run mark);
- whether the run used the Shift boost;
- the path of the course — a list of positions along the run, used for the ghost and as evidence that the time was actually run, not typed in;
- the owner identifier described above (the random number, or your account, if you signed in).
None of this describes you outside the game. We do not collect IP addresses for logging, we do not build behavior profiles and we do not cross-reference this data with any other source.
Vectors, the game's currency
With your account signed in, the server keeps the ledger of your Vectors: every time you earn them (the run or online match that paid, and how much) and every purchase made with them (the item and the price). Your balance comes from it. Vectors are only earned by playing; they are not sold, have no cash value and cannot be transferred. Deleting your account deletes this ledger with everything else.
Signing in with Google
Signing in is optional for playing alone and required for online play (Quick match, rooms and friends): it is what guarantees that each person's nickname belongs only to them. Without an account, clearing your browser data makes you lose your nickname and the ownership of your records, and playing on another computer creates another identity.
When you sign in, Google issues a signed token that the game sends to the server for verification.
From that token, the server stores only the account identifier — an
opaque sequence of numbers that Google calls sub — and the account
nickname: the one you already used in the game or, if there was none, a random one (for
example “Coelho4821”), which you can change once. Your Google account name never becomes your nickname.
Your email is not stored anywhere. It travels inside the token, because Google builds that token, but it is discarded as soon as the signature is verified. The game also does not ask for or receive access to Gmail, Drive, contacts, calendar or any other service of your account: the permissions requested are only the basic sign-in ones.
The token stays in your browser while it is valid (about an hour). So you do not
have to sign in again every time you open the game, the server exchanges that token for a
30-day session: the browser keeps a random code in a cookie
(__Host-vector_sessao, which only this site reads and only over a secure connection), and the database
stores only a cryptographic digest of that code, the account identifier and the dates —
no name, no email, no photo. Each account keeps at most 10 devices signed in.
Signing out deletes the token, the cookie and the session right away. To create a Pix, the game asks
you to confirm your Google account again, because the payment requires your email, and it is not
stored.
Shop
Buying in the shop requires a Google account. For each order we store the account identifier (not the email), the item, the amount, the dates and the payment status; for each account, the list of items it owns. This is used to deliver the item and to have it follow you to another device. The browser keeps a copy of that list and the last knife you chose.
Payment is made by Pix and processed by Mercado Pago. To create the charge, we send it the amount, the item description, your Google account email and the CPF (Brazilian tax ID) you type at checkout. The email and the CPF are not stored by the game: they go straight to Mercado Pago, which handles them according to its own privacy policy. From the Pix, we keep only the charge code and the payment status.
Donations, through the Support button, follow the same path: we store the account identifier, the amount, the dates and the payment status, and Mercado Pago receives the amount, the account email and the donor’s CPF. A donation creates no item and does not appear on the leaderboard.
Online rooms
To play with other people, the game connects to a room on the server. While you are in a room, it receives and passes on to the other participants:
- the nickname and character you chose, and whether you play on a computer or a phone;
- chat messages, after they go through a profanity filter;
- your position on the map during the match, several times per second, so the others can see you run;
- the time and trace of each finish, to check the result.
The room keeps only what it needs to work — who is in it, the match options and the times of the match in progress — and deletes everything when the last person leaves. Chat and positions are not recorded. So that someone removed by the leader cannot come back to the same room, it keeps that person's random browser number for as long as it exists. Runs finished in a room also go to the leaderboard, like any other.
A room marked as public shows up in the game's list with the map, the format, how many people are in it and the leader's nickname. If someone reports a player, the report keeps the reason, the nicknames and identifiers of both the reporter and the reported player, and the reported player's latest chat messages; it is kept for up to 30 days, only for review, and then deleted.
Friends
You can add friends by nickname. The server keeps each friendship, and each request not yet answered, as a pair of identifiers (the account or the browser's random number), plus the last nickname you appeared online with, which is the name your friends see. When you go online with a free nickname, it is reserved for you, just as with your first leaderboard run. While the game is open, your friends see that you are online and can invite you to a room; with “Appear offline” on, no one sees you or invites you. To end a friendship, just remove it from the list: it disappears on both sides.
Who else handles this data
| Service | Role |
|---|---|
| Cloudflare Pages, D1 and Durable Objects | host the site, the leaderboard database and the online rooms |
| Google Identity Services | handles sign-in, when you choose to sign in |
| Mercado Pago | processes the Pix for purchases and donations; receives the amount, the item or donation, the account email and the payer’s CPF |
We do not sell, rent or share data with anyone else, for any purpose.
How long it is kept
Runs are kept for as long as the leaderboard exists — they are the history of the competition. Shop orders and items are kept while the account owns the items; donation orders are kept as a record of what was received. Once the account is deleted, payment records no longer point to it (the law requires sales to be recorded). What is in your browser stays until you clear it.
How to delete it
- The whole account: go to Settings → Delete my account while signed in with Google. Runs, nickname, profile, friends, challenges, purchased knives and sessions are removed from the server. Step by step, and what is kept: excluir-conta.html.
- In the browser: clear the site data and everything listed above disappears.
- On the leaderboard: write to prof.martins.94@gmail.com with your nickname. We delete the runs and the nickname reservation, and confirm by email.
- In your Google account: you can revoke this game’s access at any time at myaccount.google.com/permissions.
Children
The game is not directed at children under 13 and asks for no data beyond what is described here.
Changes
If anything changes in what is stored, this page changes with it, with the update date at the top.
← back to the game