Jump past the menu

Your data, our job

Privacy, in plain bunny language

Our honest answer to "what do you know about me?" is "very little". Below is the full list, organized around the ten fair information principles set out in PIPEDA, the federal law that covers private businesses in Canada.

Panel last redrawn

The person who answers for this

bunnsinlove.com is published by Bunns in Love, 2165 Gottingen Street, Unit 4, Halifax, NS B3K 3B5, Canada. Josie MacLeod, who keeps the list, is also our privacy lead. You can write to her at [email protected].

What reaches us

Through the mailbag form

The name you type, your email address, the speech bubble you pick and the note itself. Each note is filed with a timestamp and a scrambled stand-in for your IP address, a one-way hash we use to stop floods of junk without keeping the address itself.

Just by visiting

Our web host writes brief access records, as almost every server does: IP address, browser, the page that was requested and when. Those records exist to keep the lights on and the doors locked.

On your own gadget

Your cookie answer sits in your browser’s local storage, and form pages add a session cookie for the security token. The cookie jar page names both.

What never reaches us

Player accounts, card details, location, tracking profiles, analytics, ad identifiers or lists bought from anybody: none of those exist here. Bunns in Love is written for grown-ups and never tries to gather details about children. If a child has written to us, a parent or guardian can ask Josie to erase the note.

What we do with it

A note you send is read, answered and, when it reports a problem, acted on. Pressing send is how you agree to that, and it is the only use we make of your details. No newsletters, no marketing, no lists.

When it gets deleted

  • Mailbag notes: deleted no later than twelve months after we last write back.
  • Server access records: gone within thirty days, unless we are looking into an attack.
  • Your cookie answer: stays on your gadget until you clear it yourself.

Who else touches it

Personal details are never sold, swapped or rented out. Just two outside firms ever touch them, the web host and the email service, each bound to confidentiality and acting on our instructions. Some of their servers may be located abroad, and information stored there can be reached under that country’s laws. We would pass information to the authorities only if a Canadian law compelled us to.

Locks and keys

Pages travel over an encrypted HTTPS connection. Mailbag notes sit behind a locked server door that visitors cannot open; only the four of us hold the key. Nothing online is bulletproof, so we recheck these safeguards whenever the site is rebuilt.

Asking, fixing, deleting

PIPEDA gives you the right to see what we hold about you, to have mistakes corrected and to withdraw your consent, at which point your notes are deleted. Email Josie; she replies within thirty days. Should that answer leave you dissatisfied, Canada’s federal Privacy Commissioner, reachable through priv.gc.ca, takes complaints from anyone.

If this page changes

Any change to how we treat information shows up here first, and the page gets a fresh date in its header. Questions are welcome by email or by post to the Gottingen Street office.