Privacy Policy

VECTOR — Bunny Hop · updated October 29, 2026

This is a translation provided for convenience. The original is in Portuguese, and if the two versions ever differ, the Portuguese version prevails.

This is a free browser game. It stores the minimum needed for a leaderboard to exist, and nothing more. There are no trackers or analytics tools, and no ad ever shows on its own: the only one is an optional video you choose to watch to continue in survival training (see Ads). The only numbers we look at come from the game's own data (see Game numbers). This page describes exactly what happens to your data; if anything here is unclear, write to prof.martins.94@gmail.com.

Playing without an account

Solo practice needs no account at all (online play — Quick match, rooms and friends — needs the Google account described further down). Without signing in, everything that exists stays in your own browser, in localStorage:

WhatWhat for
Your best times on each mapshowing your record on the map card
The nickname you chosesigning your runs on the leaderboard
A random number, generated in your browserreserving the nickname for you. It identifies no one: it is a randomly drawn number, unrelated to your name, email or device
The path of your best run on each mapthe “ghost” that runs beside you
A queue of runs not yet sentnot losing a time you set while you were offline
The game language you choseopening the game in that language next time

Clearing the site data in your browser deletes all of this at once, and the game keeps working as if it were your first visit.

What goes to the server

When you finish a course, the run is sent to the leaderboard with:

None of this describes you outside the game. We do not collect IP addresses for logging, we do not build behavior profiles and we do not cross-reference this data with any other source.

Vectors, the game's currency

With your account signed in, the server keeps the ledger of your Vectors: every time you earn them (the run, online match or achievement that paid, and how much) and every purchase made with them (the item and the price). Your balance comes from it. Vectors are only earned by playing; they are not sold, have no cash value and cannot be transferred. Deleting your account deletes this ledger with everything else.

Achievements: to know what you have achieved, the server counts, on your account, the online matches played with other people, the wins and the knife hits that knocked someone down; the rest (maps finished, leaderboard, days played, friends) comes from what is already stored. Each achievement you earn is marked in the Vectors ledger, with the date.

Signing in with Google

Signing in is optional for playing alone and required for online play (Quick match, rooms and friends): it is what guarantees that each person's nickname belongs only to them. Without an account, clearing your browser data makes you lose your nickname and the ownership of your records, and playing on another computer creates another identity.

When you sign in, Google issues a signed token that the game sends to the server for verification. From that token, the server stores only the account identifier — an opaque sequence of numbers that Google calls sub — and the account nickname: the one you already used in the game or, if there was none, a random one (for example “Coelho4821”), which you can change once. Your Google account name never becomes your nickname.

Your email is not stored anywhere. It travels inside the token, because Google builds that token, but it is discarded as soon as the signature is verified. The game also does not ask for or receive access to Gmail, Drive, contacts, calendar or any other service of your account: the permissions requested are only the basic sign-in ones.

The token stays in your browser while it is valid (about an hour). So you do not have to sign in again every time you open the game, the server exchanges that token for a 30-day session: the browser keeps a random code in a cookie (__Host-vector_sessao, which only this site reads and only over a secure connection), and the database stores only a cryptographic digest of that code, the account identifier and the dates — no name, no email, no photo. Each account keeps at most 10 devices signed in. Signing out deletes the token, the cookie and the session right away. To create a Pix, the game asks you to confirm your Google account again, because the payment requires your email, and it is not stored.

Shop

Buying in the shop requires a Google account. For each order we store the account identifier (not the email), the item, the amount, the dates and the payment status; for each account, the list of items it owns. This is used to deliver the item and to have it follow you to another device. The browser keeps a copy of that list and the last knife you chose.

Payment is made by Pix and processed by Mercado Pago. To create the charge, we send it the amount, the item description, your Google account email and the CPF (Brazilian tax ID) you type at checkout. The email and the CPF are not stored by the game: they go straight to Mercado Pago, which handles them according to its own privacy policy. From the Pix, we keep only the charge code and the payment status.

Donations, through the Support button, follow the same path: we store the account identifier, the amount, the dates and the payment status, and Mercado Pago receives the amount, the account email and the donor’s CPF. A donation creates no item and does not appear on the leaderboard.

Online rooms

To play with other people, the game connects to a room on the server. While you are in a room, it receives and passes on to the other participants:

The room keeps only what it needs to work — who is in it, the match options and the times of the match in progress — and deletes everything when the last person leaves. Chat and positions are not recorded. So that someone removed by the leader cannot come back to the same room, it keeps that person's random browser number for as long as it exists. Runs finished in a room also go to the leaderboard, like any other.

A room marked as public shows up in the game's list with the map, the format, how many people are in it and the leader's nickname. If someone reports a player, the report keeps the reason, the nicknames and identifiers of both the reporter and the reported player, and the reported player's latest chat messages; it is kept for up to 30 days, only for review, and then deleted.

Friends

You can add friends by nickname. The server keeps each friendship, and each request not yet answered, as a pair of identifiers (the account or the browser's random number), plus the last nickname you appeared online with, which is the name your friends see, when you last opened the game with your account and from where (phone or computer, app or website — only the kind, nothing that identifies the device). When you go online with a free nickname, it is reserved for you, just as with your first leaderboard run. While the game is open, your friends see that you are online and can invite you to a room; with “Appear offline” on, no one sees you or invites you. To end a friendship, just remove it from the list: it disappears on both sides.

Phone reminders

If you accept reminders, your device gives the game a notification address (from the phone's or the browser's notification service) and two keys that encrypt the message. The server keeps this with your account, your language and the time of the last reminder, to send at most one notification a day, in the late afternoon, and only if you haven't played or claimed the daily reward yet. The content is encrypted: the notification service only delivers it. To stop, turn it off in Settings (the address leaves the server right away) or remove the game's notification permission in your device settings.

Clans

In a clan, the other members see your nickname, your points this season and how many days you have been in it; the server keeps which clan you are in and since when, and the requests to join. Points come from the runs the server already keeps. To leave, tap Leave in the clan; if you were the leader, leadership passes to the oldest member.

Ads

The game has no banners and no ad that shows on its own. The only ad is a rewarded video, and only if you choose it: in solo training on the survival maps, when a hazard gets you, the end screen offers Continue (ad); watch it to the end and the attempt goes on from where it stopped. The video comes from Google AdSense: to prepare the offer, Google's code is loaded on that screen, and Google may use browser cookies and identifiers to pick and measure the ad, under its own policy (how Google uses data from partner sites). You can limit personalized ads at adssettings.google.com. The game sends Google no data from your account, the leaderboard or your purchases.

Game numbers

To know how the game is doing, the person who runs it sees, in a dashboard inside the game that only their account opens, numbers taken from this same data: how many people played each day, how many runs and matches, the most played maps and the busiest hours, how many accounts have the game open right now and the last nicknames seen, with when and from where (phone or computer, app or website). None of this leaves the game, goes to third parties or is used for ads.

Who else handles this data

ServiceRole
Cloudflare Pages, D1 and Durable Objectshost the site, the leaderboard database and the online rooms
Google Identity Serviceshandles sign-in, when you choose to sign in
Mercado Pagoprocesses the Pix for purchases and donations; receives the amount, the item or donation, the account email and the payer’s CPF
Google AdSenseshows the rewarded video for Continue, only when you choose it; uses browser cookies and identifiers, under Google’s policy

We do not sell, rent or share data with anyone else, for any purpose.

How long it is kept

Runs are kept for as long as the leaderboard exists — they are the history of the competition. Shop orders and items are kept while the account owns the items; donation orders are kept as a record of what was received. Once the account is deleted, payment records no longer point to it (the law requires sales to be recorded). What is in your browser stays until you clear it.

How to delete it

Children

The game is not directed at children under 13 and asks for no data beyond what is described here.

Changes

If anything changes in what is stored, this page changes with it, with the update date at the top.

← back to the game