Privacy Policy

This Policy explains how UnBunkr processes information when you use unbunkr.lol.

1. Data controller and contact

The UnBunkr project operator acts as controller for operational analytics and correspondence. Privacy requests: privacy@unbunkr.lol. Abuse reports: abuse@unbunkr.lol.

2. Information processed

• Network information: your IP address is processed temporarily to deliver responses, enforce security limits, and create a daily pseudonymous identifier. The analytics module does not store the raw IP address.
• Usage information: request counts, stream/download counts, relayed bytes, approximate infrastructure cost, partner-link clicks, timestamps, and technical errors.
• URLs you submit: public album URLs and file identifiers required to perform your request. Album results may be held in a short-lived server cache.
• Browser storage: the adult-content confirmation time is stored in localStorage for up to 30 days. No account is created.
• Messages: information you voluntarily send to contact, privacy, or abuse addresses.

3. Why information is processed

Operational data is processed for the legitimate interests of providing the Service, preventing abuse, enforcing transfer limits, diagnosing failures, estimating costs, and handling legal reports. Where consent is legally required for a future non-essential advertising or analytics technology, that technology must remain disabled until valid consent is collected.

4. Retention

Daily pseudonymous usage records reset at least once per UTC day and are kept in server memory only in the default configuration. Short-lived album and metadata cache entries normally expire within minutes. Security and application logs are retained according to the hosting operator’s configured rotation. Correspondence may be retained as needed to resolve the request or comply with law.

5. Third-party connections

UnBunkr requests public pages and metadata from Bunkr and album search results from balbums.st. Your browser may connect directly to approved thumbnail or media CDN hosts, especially when Direct CDN fallback is used; those hosts will receive normal connection data such as your IP address. Labelled sponsor, affiliate, advertisement, and support links redirect to external sites with independent privacy policies.

6. Cookies and advertising

The default Service does not set advertising cookies or load third-party advertising scripts. Configured partner links are ordinary labelled links. If behavioural ads, measurement pixels, or non-essential cookies are introduced later, this Policy and the consent interface must be updated before they are enabled.

7. Sharing and international transfers

Information may be processed by infrastructure providers needed to operate the Service and disclosed when legally required or necessary to protect users and the Service. Upstream and sponsor services may operate outside your country. Appropriate safeguards must be assessed by the operator before commercial launch.

8. Your rights

Depending on your location, you may have rights to access, correct, erase, restrict, object to, or obtain a copy of personal data, and to complain to your data protection authority. Because daily analytics identifiers are deliberately pseudonymous and not linked to accounts, we may need additional information to identify a relevant record.

9. Children

The Service is not intended for anyone under 18 or under the age of majority in their location. Do not use the Service if this applies to you.

10. Security and changes

We use access controls, bounded caches, rate limits, pseudonymisation, and minimal-data defaults, but no internet service is risk-free. Material changes to this Policy will be shown by updating the effective date.