Privacy Policy

Information We Collect

Account Information (via Clerk)

• Registration Data. Name, email address, profile picture.

• Authentication Data. Password hashes managed by Clerk.

1.2 Order & Recipient Data (via Prisma & Supabase)

• Recipient Details. Name, delivery address, phone number, contact method.

• Order Contents. Items you request and any special instructions.

1.3 Payment Information (via Stripe)

When you check out, we create a Stripe Checkout Session. We only store Stripe’s customer ID; your credit card details are processed and stored securely by Stripe under PCI compliance.

1.4 Emails & Notifications (via Resend)

We send transactional emails (order confirmations, shipping updates) using Resend. We store only your email address and the minimal metadata needed to deliver these messages.

1.5 Usage & Analytics (via Google Analytics & OpenPanelDev)

• Page Views & Events. Tracked by Google Analytics and OpenPanelDev to improve UX.

• Cookies & Local Storage. Standard analytics cookies, no personal data beyond anonymized identifiers.

How We Use Your Information

• To create and manage your account (Clerk).

• To process and fulfill your orders (Prisma, Supabase).

• To handle payments securely (Stripe).

• To send you order updates (Resend).

• To monitor and improve Service performance (Analytics).

How We Share Your Information

• With Service Providers: Clerk, Stripe, Resend, Supabase, Vercel—they process data on our behalf.

• Legal Compliance: When required by law or to protect rights.

• With Our Shopper: Only your recipient details and order items—to fulfill your order.

Cookies and Tracking

We use cookies and similar technologies for:

• Authentication (Clerk).

• Analytics (Google Analytics, OpenPanelDev).

• Performance and error monitoring (Vercel logs).

You can disable non-essential cookies via your browser settings, but this may affect functionality.

Data Security

We use industry-standard security measures:

• HTTPS/TLS everywhere (Vercel).

• Encrypted database connections (PostgreSQL via Prisma/Supabase).

• PCI-compliant payment processing (Stripe).

Data Retention

We retain personal data as long as your account is active or as needed to provide the Service. Order records are kept for tax and legal purposes (minimum 3 years).

Your Rights

Depending on your location, you may have rights to:

• Access or port your data.

• Correct or update inaccurate data.

• Delete your account and personal data.

• Object to or restrict processing.

To exercise any right, please contact us at privacy@bunnybay.shop.

Children’s Privacy

Our Service is not intended for anyone under 16. We do not knowingly collect data from minors.

Changes to This Policy

We may update this policy—last updated date will change. Continued use of the Service after changes constitutes acceptance.

Contact Us

If you have questions or requests, email us atprivacy@bunnybay.shop