Obunu · Passport
Privacy
What your Obunu passport keeps about you, who else sees it, and how to have it removed. Last changed 18 October 2026.
Who
The passport (passport.obunu.com and the Obunu app's sign-in) is run by Paul Visser, the Netherlands. Questions, or anything you want seen, changed or removed: privacy@obunu.com.
What it keeps
- Your mail address, to sign you in (a code or a link by mail).
- Your handle, the name you show and your look (the body and colours you pick in the Locker).
- Your friends and friend requests, and the roles you give or are given in worlds.
- What you have from the store: the items (when, and whether a gift or bought), your credits and every change to them, and the looks you save as loadouts. Only you see these; the worlds see only the look you wear.
- The worlds you register: their name, address, whether they're open and how many people are inside.
- Which worlds you were let into, and when (the last time for each world): the passport records it each time it gives you a visa, so a world can ask whether someone is inside it now (only that world, about the last 12 hours). You see your own; nobody else does.
- Signed in with Google or Facebook? Then also what they send: your name, mail address and profile picture. Nothing else from those accounts, and nothing is posted there.
- The sign-in service's logs (when you signed in, from which IP address and browser), kept a few days to keep the service safe.
No ads, no tracking, and nothing is sold. The passport keeps your sign-in in your browser's storage and sets no tracking cookies. It counts one thing: that a new passport was made, and, if you came from a button on obunu.com, which button. That button's name comes along in the address and waits in this browser tab (session storage) until you have signed in, then it is gone. The count goes to PostHog, in the EU, with a new random number and nothing about you: not your mail address, not your passport, not your name (GDPR article 6(1)(f), as below).
On obunu.com
The home page, obunu.com, counts how people use it, so we can see which button brings people to their passport: that a page was seen (with the page it came from), which parts of it were scrolled to, which passport button was pressed, and what was tried on it. With that go the kind of browser, system and screen. It sets no cookies and keeps nothing in your browser: each visit gets a new random number, so one visit can't be tied to the next or to your passport. It sends nothing when your browser asks not to be tracked (Do Not Track or Global Privacy Control). The numbers go to PostHog, in the EU (GDPR article 6(1)(f): our interest in knowing what the page does, with as little about you as we can).
The waitlist
Until Obunu opens, obunu.com has a waitlist. Leave your mail address there and we keep: the address, which button on the page you used, when you asked, when we mailed you and how often, and when you confirmed. We send you one mail with a link to confirm (an address isn't on the list until then), and one more when the doors open. Nothing else, and nobody else gets the address. The mail goes out through Resend, in Ireland; the list lives in the passport's database in Frankfurt. To leave it, use the link in the mail or on the page you confirmed on, or write to privacy@obunu.com; the address is gone at once. Once the doors have opened and we've sent that mail, the list goes too (GDPR article 6(1)(a): you asked for it, and confirmed).
Dreams
When a world closes, it may leave a dream: a still copy of itself that its owner's friends can walk while it is closed. A dream holds the world's own files (its models, pictures and sounds, named by their contents) and where things stood, kept by the passport's file store. It never holds the world's private packs, its sealed surprises, the people who were in it, their profiles or what they carry, and it runs none of the world's code. Who may walk it: whoever may see that world on Home, with a ticket that lasts two hours. Nobody hears you in a dream, and nobody else is there.
You may leave a note in a dream (five at most, up to 500 characters each). The passport keeps the note, where you left it, when, and that it was you; the world's owner reads it with your name and handle, on Home and in their world when it opens. You see your own notes in that dream; other visitors don't. A dream and its notes go when the world is removed, and your notes go with your passport.
Dreams are served from a separate address of their own, which never sees your passport's sign-in: it knows you only by the ticket, and sets one cookie for that dream's files (no tracking), which ends with the ticket.
Things you carry
Some worlds have things that travel (a die, a trophy): put one in your pouch and it goes with you to the next
world. For that the passport keeps, per world, what your pouch holds there: each thing's name, its shape and colour
and, when it has one, its model (a file named by its contents, in the passport's file store). Only that world can
change its own list, and only while you have been there lately. Your next visa carries the newest of them (eight at
most) to the world you go to, which may take them or not; nothing else about you goes with them. You see what you
carry, and can forget it all, at /api/carried; the list of a world goes when that world is removed, and
all of it with your passport.
The atlas: who finds which world, and who sees where you are
- Who finds a world. Its owner says: only their friends (the default), or their friends' friends too. A friend of a friend sees the world on Home (its name, whose it is, whether it's open, through which friend they know of it) but may not walk in: they can knock, and the owner decides.
- Where you are. A world tells the passport who is inside it (only people the passport let in there in the last 12 hours count), every half a minute, and the passport forgets it when the world closes or stops saying so. It shows you at that world only to your own friends, and only to those who may find that world. Turn off "Friends see where I am" on Home and nobody sees where you are (the world still counts you among the people inside, without your name).
- Knocks. When you knock, the passport keeps who knocked, where and when, and the answer, for a day. The world's owner sees your name and handle, on Home and in their world (so do the builders who are inside). Let in, you are a visitor there for two hours; then that ends by itself.
- A world's globe. A world may have a globe of the neighbourhood. When you look at it, the world asks the passport for your atlas (only while you are inside it): so whoever hosts that world sees, while you are there, which worlds you can find, which of your friends are where (as your atlas shows them to you), and can knock for you when you ask. It doesn't see your friends list, your notes or the knocks at your own door.
Why
To give you the passport you asked for: signing in, your look in every world, your friends, the worlds you may visit (GDPR article 6(1)(b), a service you asked for).
Who else sees it
- The worlds you step into. A world is run by whoever hosts it, not by us. When you go in, its host gets a short-lived visa with your passport id, your name, your look, your role there and the things you carry (above).
- Your friends see your name, handle and look, and the worlds you let them into.
- The services the passport runs on, only to run it: Supabase (the database and sign-in, in Frankfurt), Vercel (the site, in Frankfurt, and for now the dreams' file store), Resend (the sign-in mails, in Ireland), and Google or Meta only if you use their button.
How long, and removing it
As long as you have a passport. To have it removed, mail privacy@obunu.com from the address you sign in with (or say which Google or Facebook account you used). Within 30 days your passport goes, with your look, your friends, your worlds and their roles. This is also how to remove what came from Facebook or Google.
Your rights
You may see what is kept about you, have it corrected or removed, take it with you, or object. Ask at privacy@obunu.com. Not happy with the answer? You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.