Privacy Policy

Last updated: March 2026

1. Who We Are

Bunchies ("we", "us", "our") operates the website bunchies.cc — a community directory for cycling bunch rides. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

2. Information We Collect

We collect the following types of information:

  • Account information — name, email address, and password when you register. If you sign in via Google, Facebook, or Apple, we receive your name and email from those providers.
  • Profile information — display name, avatar image, and unit preferences you set in your account.
  • Ride and route data — ride listings, GPX files, and route data you submit.
  • Usage data — pages visited, search queries, and interactions with the Service, collected via server logs and analytics.
  • Location data — approximate location if you grant browser geolocation permission (used to centre maps and search results). We do not store your precise location.

3. How We Use Your Information

We use the information we collect to:

  • Provide and operate the Service
  • Authenticate your account and maintain session security
  • Display your ride listings and organiser profile publicly
  • Send transactional emails (password reset, account notifications)
  • Improve and debug the Service
  • Comply with legal obligations

We do not sell your personal information to third parties.

4. Public Information

Ride listings, organiser profiles, and display names are public. If you create a ride or organiser profile, the information you submit (including your display name) will be visible to all visitors. Do not include sensitive personal information in public-facing fields.

5. Third-Party Services

We use the following third-party services which may process your data:

  • Mapbox — map rendering, geocoding, and routing. Location queries you make are sent to Mapbox. See the Mapbox Privacy Policy.
  • Vercel — hosting and infrastructure. See the Vercel Privacy Policy.
  • Google / Facebook / Apple — OAuth sign-in providers, if you use social login.
  • SendGrid — transactional email delivery.
  • Cloudflare Turnstile — bot protection on forms.

6. Cookies and Storage

We use cookies to maintain your session after login. We also use sessionStorage temporarily to carry draft ride data between pages. We do not use advertising cookies or cross-site tracking cookies.

7. Data Retention

We retain your account data for as long as your account is active. Ride listings you create remain on the Service unless you delete them. You may delete your account and associated data at any time from your account settings.

8. Security

We take reasonable technical measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No system is perfectly secure — please use a strong, unique password for your account.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate data
  • Request deletion of your account and data
  • Object to or restrict certain processing

To exercise these rights, contact us at hello@bunchies.cc.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date when changes are made. Continued use of the Service after changes are posted constitutes your acceptance of the revised Policy.

12. Contact

Questions about this Privacy Policy? Email us at hello@bunchies.cc.