Privacy
Bonsai beta · last updated
In short: Bonsai collects as little as it can. Played on this device, your garden never leaves it. Played online, our server keeps your garden so it grows while you are away. There are no ads, no tracking across other apps or websites, nothing is sold, and there are no payments during the beta.
Who runs Bonsai
Bonsai is made and run by DuskDelve. Questions, requests about your data and complaints: .
Playing on this device
By default the game keeps everything (your trees, your progress, settings, photos you take) in this browser's storage on your device. We don't receive it. Clearing the site's data, or Delete everything in the Parent dashboard, removes it.
Playing online
If you choose Play online, the game makes an account with a random player id (no name, email or phone number is needed) and keeps on our server:
| What | Why | How long |
|---|---|---|
| Your garden: trees, items, progress, quests, settings such as language and your time-zone offset | Running the game and growing your trees while you are away | Until you delete the account |
| Sign-in sessions (stored only as a fingerprint of the key your device holds) | Keeping you signed in | Up to 180 days each |
| An Apple or Google account, only if you link one in the apps: its id at Apple or Google, never its name or email | Giving you your garden back on a new phone | Until you delete the account |
| A copy of the game on your device (your gardens, settings and progress), only when you ask for a transfer code to move it to the app or another device | Moving your game to another device | Until the code is used, at most 15 minutes, then deleted (unused codes within the hour) |
| Your friend code, friends, gifts and help between friends, and who invited you, if you joined from an invite | Playing with friends you choose | Until you or they remove the friendship, or the account is deleted |
| Trees you enter in the weekly exhibition, and the votes you cast | Running the exhibition | Results are kept as the exhibition's history |
| Trees you choose to share (a picture and a page at a link) | Showing them to whoever you give the link | Until you delete the account |
| A push subscription, only if you turn on reminders | Telling you when a tree would like water. The reminder carries no data about you | Until you turn reminders off or the subscription ends |
Other players see only what you share with them, and names others see are chosen from a fixed list, never typed text.
The iOS and Android apps
The apps are the same game and keep the same data: on your device, and on our server if you play online. Their reminders are planned by the app on your phone, so they go through no push service and carry nothing about you. A photo you take for the AR view stays on your device.
Usage data
Unless you turn it off (Settings → Share anonymous usage data), the game sends a few events that help us improve it: when a session starts and ends, which care actions and screens are used, how smoothly it runs, and errors. They carry a random id for this install (not your account), the country your connection comes from (not your location), and nothing you typed. Children's profiles send only the basics, without the install id. We keep raw events for at most 13 months.
What we never collect
Your location, contacts, microphone, advertising id or a device fingerprint. The AR view uses your camera on your device only: no camera image leaves it.
Who helps us
The game and its server run on Cloudflare, which processes network traffic (including your IP address) to deliver it. We use IP addresses only for a short time to stop abuse, such as too many new accounts at once, and don't store them with your garden. Reminders go through your browser's push service (Google, Mozilla, Apple or Microsoft). In the apps, signing in with Apple or Google goes through them. Apple tells us only the account's id; Google's sign-in also shows us your name, email address and picture, which we don't keep.
Children
Bonsai is made to be safe for children. In child mode the game never asks for anything to be bought, no typed text reaches other players, play time and bedtime can be set by a grown-up, and reminders and sharing are off unless a grown-up turns them on. The Parent dashboard shows the data and lets a grown-up export or delete it. The first time someone goes online, adds a friend or opens an invite, the game asks for their year of birth; it keeps only whether they are under 13 (as child mode), never the year. In child mode, playing online and friends need a grown-up's yes.
Your rights
You can see and export your data (Parent dashboard → Export), delete it all, online account included (Parent dashboard → Delete everything), and turn usage data and reminders off at any time. You can also ask us for a copy, a correction or deletion, or object to our use of usage data, at the contact above. If you are in the EU, the UK, Türkiye or Brazil you can complain to your data protection authority.
Changes
If this notice changes in a way that matters, the game will say so before the change applies. The current version is always at /privacy.html.