Privacy policy

Last updated 9 November 2026.

You never need to give us your name or email address to play. Signing in is optional.

What we collect

• A random player ID, stored in a cookie called bsy, so we can keep your garden and streak on this browser. If you play as a guest, it isn’t linked to your name or email.
• Your games: the answers you type, their scores and timings, your garden and your streak.
• Your Google account, only if you choose to sign in: your name, email address and an account ID. Sign-in uses the Doodlefox Games account system, run on Google Firebase, which is designed so that one account can work across our games. Bonsaily does not share your games or garden with any other game.
• Usage statistics: your country (worked out from your connection; we don’t store your IP address), device type, browser and operating system family, language, whether you use the installed app, how you found us (the referring site or campaign), whether ads are personalised, whether you are signed in, and what you do in the game, such as opening Share or the garden, signing in, installing the app, or the game running into an error. These are linked to your player ID. They are on unless you switch them off in Settings.
  • In the European Economic Area and Switzerland, and when we can’t tell where you are, we keep them only as anonymous counts: no player ID, no device details, nothing that could single you out.
  • In India, from 13 May 2027 (when the consent rules of the Digital Personal Data Protection Act begin), we will do the same unless you have agreed to more.
• Guesses the game doesn’t recognise, added up without any link to you, so we can fix missing answers.
• Missing-answer reports you choose to send.
• Leagues, only if you make or join one: the league’s name, the name you choose to be shown in it, your role (admin or player) and when you joined. Other players in the same league see that name, your daily totals and the marks for each answer (never the answers you typed), the topics of this week’s questions, what time you finished each tree, your streak, whether you are playing today, and your trees as drawn in the game. Starting a league needs a sign-in; joining one doesn’t. Leagues are private: only people with the league’s invite link or code can join.
• Daily reminders, only if you switch them on: the push address your browser gives us (from Google, Apple, Mozilla or Microsoft’s push service), the time you chose and your time zone’s offset. We send no words with the reminder; your device shows the text itself. Switching the reminder off deletes this.
• Your stats are worked out from your games when you open them; nothing extra is stored. If you aren’t signed in, the record they’re worked out from is kept only in your browser (local storage).
• Preferences such as sound, units and the time of your reminder, stored only in your browser (local storage).
• Standard server logs kept by our host, Cloudflare, for security and reliability.

Why

To run the game, keep your garden across your devices if you sign in, show you your garden and streak, show everyone anonymous totals (such as “14% of players also said Kenya”), fix missing answers, understand how the game is used so we can improve it, and keep the service secure. We use this information ourselves and don’t sell it.

Legal bases

Where the GDPR, the UK GDPR or a similar law applies, we run the game and keep your garden because you asked us to (contract). We use your Google account because you chose to sign in. We collect usage statistics, keep security logs and limit repeated requests because we have a legitimate interest in understanding how the game is used, improving it and protecting it; in the UK, statistics used only to improve the service are allowed without consent if you can opt out, which you can, in Settings. You can object at any time by switching usage statistics off or by emailing us.

Who processes your data

Cloudflare hosts the game and its database. Google Firebase handles sign-in if you choose it. Google serves the ads. If you switch on reminders, your browser’s push service (Google, Apple, Mozilla or Microsoft) delivers them. These companies may process data outside your country, under their standard data-protection terms. To stop repeated requests, your connection’s address is counted briefly by Cloudflare and is not stored by us.

Analytics and ads

Besides the usage statistics above, we use Cloudflare Web Analytics, which counts visits without cookies. Bonsaily is free and paid for by ads served by Google, never during the daily game. In the European Economic Area, the UK and Switzerland, Google’s consent message asks before any ad is personalised. If your browser sends Global Privacy Control, ads are never personalised. In US states with privacy laws, you can opt out of the use of your data for targeted ads through the link in that message or by emailing us. Google’s use of data is described in its partner sites policy.

Children

Bonsaily is not directed at children under 13. If you are under 18 in India, or under the age of digital consent where you live, please play as a guest and leave usage statistics off.

How long we keep it

Your games, your garden and, if you signed in, your account details are kept until you delete them. Usage statistics and unrecognised guesses are deleted after about 13 months. Anonymous totals are kept indefinitely. You can delete your data at any time.

Your choices and rights

Open Settings in the game and choose Delete under “Your data” to remove every game, tree, streak, league place and reminder linked to your browser or, if you signed in, to your Bonsaily account on every device, along with your usage statistics and the link to your Google account. This doesn’t delete the Google sign-in you use for other Doodlefox games; email us if you want that removed too. Clearing your browser’s cookies also disconnects a guest garden. Depending on where you live (for example under India’s Digital Personal Data Protection Act, the EU and UK GDPR, or US state privacy laws), you may have rights to access, correct or delete your data; email us to use them.

Contact and grievances

Doodlefox Games · doodlefoxgames@gmail.com
Grievance Officer: Kevin Jacob Mathew, reachable at the same address. We acknowledge complaints within 24 hours and resolve them within 15 days.