Privacy Policy

What this policy covers

This policy covers the Bunna Café Android game, the browser game at bunna.osavus.com, other pages on this website and messages you send to support.

Osavus Technology OÜ, also presented as Osavus Technology Ltd or Osavus, publishes Bunna Café and is the controller of personal data handled as described here. We are registered in Estonia, registry code 12514773, at Narva mnt 5, 10117 Tallinn, Estonia. Our privacy and support contact is app@osavus.com.

The game has no accounts, advertisements, real-money purchases, analytics services or built-in crash-reporting service. It does not request your contacts, location, camera, microphone or advertising identifier. Bunna Café is designed for adults; its customers, including child visitors, are fictional characters.

Your café data stays local

The game saves your café progress, ingredients, game coins, upgrades, orders, fictional customer reviews, planned visits, preferences and completed-café records. On Android, these stay in the app’s private storage, with a local recovery checkpoint to help protect progress when a save problem occurs. The browser version stores its own café in your browser.

Local identifiers distinguish saved cafés and transactions. They are not advertising identifiers. Bunna Café does not send these identifiers, your gameplay or your saved café to us or to an analytics service.

Google Play and Android may process installation and device diagnostics under their own settings and policies. Those platform services are separate from Bunna Café’s local game storage.

Keeping or deleting Android progress

Bunna Café has no cloud save or cross-device sync. The app is configured to exclude its data from Android cloud backup and device-to-device transfer. Do not rely on a reinstall or phone transfer to restore your café. We cannot recover lost progress from a server.

Local data remains in the app’s storage until you clear it or uninstall the app. Settings → Restart café replaces your current café but keeps completed-café records, control and sound preferences, and some earlier in-game review history. Restarting does not erase all app data.

To erase all local Bunna Café data, open Android Settings → Apps → Bunna Café → Storage → Clear data, sometimes called Clear storage, or uninstall the app. This removes your café, local records, preferences and recovery checkpoint. Bunna Café cannot undo that deletion.

Playing and saving in your browser

The browser game runs the same shared game rules as the Android version, on your device. An internet connection is needed to load its page and game files. Once loaded, gameplay runs locally. Reopening or reloading the game without an internet connection is not guaranteed.

Your browser café and its records are stored in this website’s browser database (IndexedDB). A separate local database holds a recovery checkpoint; it is not a cloud backup. Your sound preference is kept in local browser storage. A same-origin browser lock lets only one tab use this saved café at a time, helping prevent two tabs from overwriting each other. These storage and lock operations do not send your saved café to us.

Browser saves belong to this website in the browser profile you use. They are separate from Android saves and from other browsers or devices. There is no cloud sync, automatic transfer from Android, or automatic import of earlier browser-prototype saves.

Settings → Restart café replaces the current browser café while keeping completed-café records, control and sound preferences, and some earlier in-game review history. To remove all local browser progress, use your browser’s settings to clear this website’s site data. That removes its café, records, preferences and recovery checkpoint; restarting alone does not.

Private browsing may discard saved data when the private session ends. Browsers can also remove site data to free storage. The primary save and local recovery checkpoint can be lost together, and we cannot recover them from a server.

Loading the browser game makes requests for its page and files. The hosting service’s handling of those requests is separate from the saved gameplay that stays in your browser; see website hosting below.

When you email support

If you email app@osavus.com, we receive your email address, message, delivery metadata (such as sender, recipient and date) and any attachments you choose to include. We use them to respond, investigate the issue and follow up on your request. Send only information needed for your request, never passwords.

The game’s email link opens your chosen email service or app. It does not automatically attach your saved café or a diagnostic export. Your email provider handles sending your message under its own privacy practices.

Our support mailbox uses Microsoft 365. Access is limited to people authorised to handle support or administer the service. We do not add support contacts to a marketing mailing list. Contacting us is voluntary, but we may need relevant details to answer or resolve your request.

For ordinary support and feedback, our legal basis is our legitimate interest in responding to people who contact us and supporting Bunna Café. For statutory privacy requests or records we must keep by law, the basis is the relevant legal obligation. Retention and international processing are explained below.

When you visit this website

Opening this website, including the browser game, makes internet requests to the service hosting its pages and files. Request handling and any hosting logs are separate from your locally saved gameplay. The game does not upload your saved café, local game identifiers or review history to us.

The marketing and policy pages use locally hosted images and fonts. They include no advertising, analytics code, embedded third-party media, account sign-in or contact form. The browser game is hosted on this same website and uses bundled game resources.

Microsoft Azure hosts and delivers the website. To serve and protect pages and files, its infrastructure processes technical request information such as your IP address, requested address, time, browser information and response status. Our legal basis is our legitimate interest in providing a reliable, secure website and resolving technical problems.

We do not add visitor analytics, advertising trackers, tracking pixels or session recording, and we do not export visitor access logs to a separate analytics or logging service. This does not mean the hosting provider processes no technical logs: it may retain operational and security records as described under retention.

The site does not set advertising or analytics cookies. The browser game uses the local storage described above to save your café and preferences. That storage supports the game you choose to play and does not track you across websites.

Following a link to Osavus, Google Play or another external website sends a request to that destination, which handles your visit under its own privacy policy.

Providers, sharing and international processing

We do not sell personal data or share it for targeted advertising. Microsoft provides Azure website hosting and Microsoft 365 email delivery and storage. Providers acting on our behalf process relevant information under contractual data-protection obligations. Authorised support and service administrators can access information only as needed for their work.

We may disclose relevant correspondence to professional advisers or competent authorities where necessary to meet a legal obligation or establish, exercise or defend a legal claim. We limit such disclosure to the information needed. Protecting our legal rights is a legitimate interest; mandatory disclosures rely on the applicable legal obligation.

We are based in Estonia. Microsoft and its service providers may process website request information or correspondence outside the European Economic Area, including in the United States. Where required, transfers rely on an applicable adequacy decision or contractual safeguards such as the European Commission’s Standard Contractual Clauses. Microsoft’s Products and Services Data Protection Addendum describes its contractual safeguards. Contact us for information about the safeguards applicable to your data.

Retention and security

Local game data: your device or browser keeps progress and preferences until you remove them using the steps above, or the operating system or browser removes them. We hold no server copy of your saved café.

Support correspondence: we keep messages while handling your request and for follow-up that remains necessary. If a complaint, dispute or legal claim requires keeping a record, we keep the relevant information for that purpose and the applicable legal period. We assess retention by the request’s status, the information’s sensitivity, the need for follow-up and any legal obligations; we delete or anonymise information when it is no longer needed.

Provider records: Microsoft may keep technical, security and service records for operating and protecting its services and meeting contractual or legal duties. Retention depends on the record’s purpose, sensitivity and applicable requirements; there is no single fixed retention period for all such records. Provider backups and recovery copies are removed through the provider’s applicable retention and deletion processes. See the Microsoft Privacy Statement for its retention criteria.

The website uses HTTPS in transit. Android game saves use the app’s private storage; browser saves use storage separated by website origin and browser profile. We restrict access to support information and use provider security controls. These measures reduce risk but do not guarantee that a device, mailbox or internet service can never be compromised. Protect your device and email account, especially on shared devices.

Questions and your privacy rights

Contact app@osavus.com to ask about information you have sent us or request access, correction or deletion. Depending on applicable law, you may also have rights to restrict processing, object to processing based on legitimate interests, and receive a portable copy of information you provided. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. We do not make solely automated decisions about you that have legal or similarly significant effects.

We may ask for proportionate information to verify your identity before acting on a request. Under the GDPR, we normally respond within one month; if a permitted extension is necessary, we explain it within that initial month. Rights can have legal exceptions, which we explain where relevant. You can contact us about a child’s personal information inadvertently included in a support message.

Bunna Café has no account to delete. We do not receive a server copy of your saved café; the Android and browser deletion steps above let you remove local progress yourself. Deleting local progress does not delete correspondence you separately sent us—contact us to request that.

You may raise a concern with your local data-protection authority. In Estonia, that is Andmekaitse Inspektsioon, the Data Protection Inspectorate.

Contact and changes

Privacy and support: Osavus Technology OÜ, Narva mnt 5, 10117 Tallinn, Estonia; app@osavus.com.

The current policy is available at bunna.osavus.com/privacy/. We update it when our data practices change and show the effective date above. For material changes, we provide an appropriate notice on the website or in the app and obtain consent where required.