Privacy Policy

VECTOR — Bunny Hop · updated September 30, 2026

This is a translation provided for convenience. The original is in Portuguese, and if the two versions ever differ, the Portuguese version prevails.

This is a browser game, free and without ads. It stores the minimum needed for a leaderboard to exist, and nothing more. There are no trackers, no audience analytics and no advertising — neither our own nor third-party. This page describes exactly what happens to your data; if anything here is unclear, write to prof.martins.94@gmail.com.

Playing without an account

Solo practice needs no account at all (online play — Quick match, rooms and friends — needs the Google account described further down). Without signing in, everything that exists stays in your own browser, in localStorage:

WhatWhat for
Your best times on each mapshowing your record on the map card
The nickname you chosesigning your runs on the leaderboard
A random number, generated in your browserreserving the nickname for you. It identifies no one: it is a randomly drawn number, unrelated to your name, email or device
The path of your best run on each mapthe “ghost” that runs beside you
A queue of runs not yet sentnot losing a time you set while you were offline
The game language you choseopening the game in that language next time

Clearing the site data in your browser deletes all of this at once, and the game keeps working as if it were your first visit.

What goes to the server

When you finish a course, the run is sent to the leaderboard with:

None of this describes you outside the game. We do not collect IP addresses for logging, we do not build behavior profiles and we do not cross-reference this data with any other source.

Vectors, the game's currency

With your account signed in, the server keeps the ledger of your Vectors: every time you earn them (the run or online match that paid, and how much) and every purchase made with them (the item and the price). Your balance comes from it. Vectors are only earned by playing; they are not sold, have no cash value and cannot be transferred. Deleting your account deletes this ledger with everything else.

Signing in with Google

Signing in is optional for playing alone and required for online play (Quick match, rooms and friends): it is what guarantees that each person's nickname belongs only to them. Without an account, clearing your browser data makes you lose your nickname and the ownership of your records, and playing on another computer creates another identity.

When you sign in, Google issues a signed token that the game sends to the server for verification. From that token, the server stores only the account identifier — an opaque sequence of numbers that Google calls sub — and the account nickname: the one you already used in the game or, if there was none, a random one (for example “Coelho4821”), which you can change once. Your Google account name never becomes your nickname.

Your email is not stored anywhere. It travels inside the token, because Google builds that token, but it is discarded as soon as the signature is verified. The game also does not ask for or receive access to Gmail, Drive, contacts, calendar or any other service of your account: the permissions requested are only the basic sign-in ones.

The token stays in your browser while it is valid (about an hour). So you do not have to sign in again every time you open the game, the server exchanges that token for a 30-day session: the browser keeps a random code in a cookie (__Host-vector_sessao, which only this site reads and only over a secure connection), and the database stores only a cryptographic digest of that code, the account identifier and the dates — no name, no email, no photo. Each account keeps at most 10 devices signed in. Signing out deletes the token, the cookie and the session right away. To create a Pix, the game asks you to confirm your Google account again, because the payment requires your email, and it is not stored.

Shop

Buying in the shop requires a Google account. For each order we store the account identifier (not the email), the item, the amount, the dates and the payment status; for each account, the list of items it owns. This is used to deliver the item and to have it follow you to another device. The browser keeps a copy of that list and the last knife you chose.

Payment is made by Pix and processed by Mercado Pago. To create the charge, we send it the amount, the item description, your Google account email and the CPF (Brazilian tax ID) you type at checkout. The email and the CPF are not stored by the game: they go straight to Mercado Pago, which handles them according to its own privacy policy. From the Pix, we keep only the charge code and the payment status.

Donations, through the Support button, follow the same path: we store the account identifier, the amount, the dates and the payment status, and Mercado Pago receives the amount, the account email and the donor’s CPF. A donation creates no item and does not appear on the leaderboard.

Online rooms

To play with other people, the game connects to a room on the server. While you are in a room, it receives and passes on to the other participants:

The room keeps only what it needs to work — who is in it, the match options and the times of the match in progress — and deletes everything when the last person leaves. Chat and positions are not recorded. So that someone removed by the leader cannot come back to the same room, it keeps that person's random browser number for as long as it exists. Runs finished in a room also go to the leaderboard, like any other.

A room marked as public shows up in the game's list with the map, the format, how many people are in it and the leader's nickname. If someone reports a player, the report keeps the reason, the nicknames and identifiers of both the reporter and the reported player, and the reported player's latest chat messages; it is kept for up to 30 days, only for review, and then deleted.

Friends

You can add friends by nickname. The server keeps each friendship, and each request not yet answered, as a pair of identifiers (the account or the browser's random number), plus the last nickname you appeared online with, which is the name your friends see. When you go online with a free nickname, it is reserved for you, just as with your first leaderboard run. While the game is open, your friends see that you are online and can invite you to a room; with “Appear offline” on, no one sees you or invites you. To end a friendship, just remove it from the list: it disappears on both sides.

Who else handles this data

ServiceRole
Cloudflare Pages, D1 and Durable Objectshost the site, the leaderboard database and the online rooms
Google Identity Serviceshandles sign-in, when you choose to sign in
Mercado Pagoprocesses the Pix for purchases and donations; receives the amount, the item or donation, the account email and the payer’s CPF

We do not sell, rent or share data with anyone else, for any purpose.

How long it is kept

Runs are kept for as long as the leaderboard exists — they are the history of the competition. Shop orders and items are kept while the account owns the items; donation orders are kept as a record of what was received. Once the account is deleted, payment records no longer point to it (the law requires sales to be recorded). What is in your browser stays until you clear it.

How to delete it

Children

The game is not directed at children under 13 and asks for no data beyond what is described here.

Changes

If anything changes in what is stored, this page changes with it, with the update date at the top.

← back to the game