Scope and privacy responsibility

This Privacy Policy describes the processing of information through Bunny Financial websites, hosted interfaces, contact forms, technical infrastructure and direct communications.

References to Bunny Financial, Bunny, “we,” “us” or “our” in this Policy refer to the operator responsible for the relevant Bunny-hosted website or communication channel.

This Policy does not govern independent blockchain networks, external wallet applications or unrelated third-party websites. Those systems may process information according to their own rules.

Information you provide directly

We may process information that you choose to provide when contacting Bunny, submitting a support request, reporting a security issue or proposing a collaboration.

• Name or other identifier entered into a contact form.
• Email address used to receive a response.
• Inquiry category, subject and message content.
• Organization or project information included in a partnership request.
• Public transaction hash, blockchain network or public wallet address.
• Technical evidence included in a responsible security disclosure.
• Any additional information voluntarily included in a message.

Sensitive wallet information

Do not submit a private key, recovery phrase, wallet password, authentication code or any other credential capable of authorizing access to digital assets.

Wallet connections and public addresses

When a user connects a compatible wallet, the Bunny interface may receive or display the wallet’s public address, active network and publicly available blockchain information.

A public wallet address is not a private key. However, it may become linked with transaction history, token balances and other information visible on a public blockchain.

• Public wallet address used for the current connection.
• Selected blockchain network and chain identifier.
• Public token balances or protocol positions requested by the interface.
• Public transaction hashes and confirmation status.
• Public smart-contract approvals or interactions.

Bunny does not require access to the private key used by the wallet to sign transactions. Transaction authorization occurs inside the user’s selected wallet environment.

Information generated automatically

Website infrastructure may automatically process limited technical information needed to deliver pages, maintain security, diagnose errors and protect services from abuse.

• Internet Protocol address or related network identifier.
• Browser type, operating system and device category.
• Requested page, date, time and referral information.
• Language, display and technical compatibility settings.
• Error, performance and diagnostic information.
• Security events, rate limits and suspected malicious activity.
• Cookie or browser-storage identifiers where permitted.

This information may be processed in server logs, content-delivery systems, security services or diagnostic tools.

Cookies and browser storage

Bunny may use cookies, local storage or similar technologies to operate website functionality, preserve preferences, maintain security and measure permitted website activity.

Essential technologies

Essential technologies may be used without which a requested website feature, security control or preference cannot operate correctly.

Optional technologies

Where required by applicable law, optional analytics, measurement or preference technologies will be used only after an appropriate choice or consent has been provided.

• Security and fraud-prevention records.
• Cookie-consent and privacy preferences.
• Language or interface settings.
• Anonymous or aggregated performance measurement.
• Session continuity for supported website functions.

Users can generally manage browser storage through their browser settings. Blocking essential storage may reduce website functionality.

How Bunny uses information

Information may be used only for purposes reasonably connected with operating, securing, supporting and improving Bunny Financial.

• Delivering website pages and requested protocol interfaces.
• Displaying public wallet and blockchain information.
• Responding to support, technical and partnership requests.
• Receiving and investigating responsible security disclosures.
• Protecting infrastructure from fraud, abuse and cyberattacks.
• Diagnosing errors and improving compatibility or performance.
• Maintaining records required for legal or security purposes.
• Enforcing the Terms of Use and other applicable policies.
• Complying with valid legal obligations and official requests.

Bunny does not need to sell private wallet credentials because such credentials should never be collected.

Grounds for processing information

The legal basis for processing depends on the information, the relevant purpose and the privacy law applicable to the user.

• Processing required to provide a requested website or communication service.
• Legitimate operational interests in security, fraud prevention and service improvement.
• Consent for optional cookies or communications where required.
• Compliance with legal, regulatory or recordkeeping obligations.
• Protection of users, infrastructure or legal rights.

Where processing depends on consent, that consent may generally be withdrawn for future processing without affecting processing that was lawful before withdrawal.

When information may be shared

Bunny may share limited information with service providers or other recipients when reasonably required for website operation, security, communication or legal compliance.

• Website hosting, network and content-delivery providers.
• Security, fraud-prevention and infrastructure-monitoring services.
• Communication and support-service providers.
• Professional advisers subject to appropriate confidentiality duties.
• Authorities responding to a valid and legally binding request.
• Parties involved in protecting Bunny or users from abuse or security incidents.
• A successor operator following a lawful organizational transition.

Service providers should receive only information reasonably necessary for the service they perform and remain subject to applicable contractual or legal restrictions.

Public and persistent blockchain information

Blockchain networks are designed to publish transaction data across distributed systems. A confirmed transaction may include public wallet addresses, contract addresses, token amounts, transaction status and other execution information.

Bunny does not control every network participant that stores, displays, analyzes or republishes public blockchain data.

• Blockchain information may remain available indefinitely.
• Public addresses may be analyzed by independent third parties.
• Transactions may be visible through multiple blockchain explorers.
• Deleting off-chain website information does not erase a blockchain record.
• Blockchain protocols may not support correction or deletion requests.
• Users should avoid publicly linking a wallet with unnecessary personal information.

How long information is retained

Off-chain information is retained only for as long as reasonably required for its purpose, legal obligations, security requirements and the resolution of relevant requests.

• Contact messages may be retained while a request is handled and documented.
• Security reports may be retained for investigation and vulnerability history.
• Operational logs may be retained for limited security and diagnostic periods.
• Consent records may be retained to demonstrate privacy choices.
• Information may be preserved where required by law or an active dispute.

Information may be deleted, anonymized or aggregated when it is no longer reasonably required.

Public blockchain records are retained according to the design and operation of the applicable decentralized network.

International processing and infrastructure

The internet, blockchain networks and supporting infrastructure may operate across multiple countries. Information may therefore be processed in jurisdictions different from the user’s location.

Where applicable law requires additional safeguards for international transfers, reasonable contractual, technical or organizational measures may be used.

Public blockchain information may be replicated globally by independent network participants without centralized geographic control.

Information and website security

Bunny uses reasonable technical and organizational measures intended to protect off-chain information against unauthorized access, alteration, loss or disclosure.

• Restricted access to operational and communication systems.
• Security monitoring and abuse-prevention controls.
• Encrypted website connections where technically supported.
• Software maintenance and vulnerability-management practices.
• Data minimization and limited retention procedures.
• Responsible security disclosure processes.

No internet or information system can be guaranteed completely secure. Users should protect their devices, browsers, email accounts and wallets independently.

Privacy rights and user choices

Depending on location and applicable law, users may have rights concerning off-chain personal information processed by Bunny.

• Request information about relevant processing activities.
• Request access to eligible personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion where no lawful retention reason applies.
• Request restriction of certain processing activities.
• Object to processing based on particular legitimate interests.
• Withdraw consent for future optional processing.
• Request eligible information in a portable format.
• Submit a complaint to an appropriate privacy authority.

Requests may require reasonable identity verification. Bunny will not request a private key or wallet recovery phrase to verify a privacy request.

Children and age-restricted access

Bunny Financial is not designed for children who lack the legal capacity required to use blockchain-based financial tools or enter into the applicable Terms of Use.

A person must satisfy the minimum legal age and capacity requirements applicable in their jurisdiction before using Bunny.

If information is believed to have been submitted by a child contrary to applicable requirements, a request may be sent through the official Contact page for review.

Third-party wallets, websites and services

Bunny may link to or interact with external wallets, blockchain explorers, repositories, infrastructure services and other independent resources.

Those services may collect or process information independently and are governed by their own privacy policies and terms.

• Wallet applications may process device, account and connection information.
• Blockchain explorers may index public addresses and transactions.
• Repository platforms may collect account and contribution activity.
• External websites may use their own cookies and analytics services.
• Infrastructure providers may process network and security logs.

Users should review third-party privacy information before connecting an account, wallet or device.

Policy updates and privacy contact

This Privacy Policy may be updated to reflect changes in website functionality, technology, legal requirements, service providers or information-security practices.

The updated version becomes effective when published unless a different effective date is stated. The revision date at the top of this page identifies the current version.

Questions, privacy requests or concerns may be submitted through the official Bunny Financial Contact page.