Cookies Used on Bunny Riot
Bunny Riot Experiences Inc. — Last updated: September 28, 2026
This page lists the cookies and browser storage used in connection with the Bunny Riot website and related services (the "Services"), grouped by category. Our Cookie Policy describes the purposes for which we use them and the choices available to you.
Essential
Essential cookies and browser storage are strictly necessary to provide the Services. They cannot be disabled through our cookie preferences.
__Secure-authjs.session-tokenMaintains your authenticated session.
Bunny Riot · Cookie · 30 days
__Host-authjs.csrf-tokenProtects sign-in against cross-site request forgery.
Bunny Riot · Cookie · End of browser session
__Secure-authjs.callback-urlReturns you to the page you were viewing after you sign in.
Bunny Riot · Cookie · End of browser session
__Secure-authjs.pkce.code_verifierSecures the authentication exchange when you sign in with Google.
Bunny Riot · Cookie · 15 minutes
br_active_partnerRecords which partner account you are managing, where you have access to more than one.
Bunny Riot · Cookie · 30 days
br_marketing_optinPreserves your marketing email preference while you complete sign-up with Google.
Bunny Riot · Cookie · 10 minutes
br_cookie_consentStores your cookie preferences for each optional category.
Bunny Riot · Cookie · 1 year
themeStores your display theme preference (light or dark).
Bunny Riot · Local storage · Until cleared
br:store-cart:…Retains the contents of your cart for each store until checkout.
Bunny Riot · Local storage · Up to 7 days
br:pending-checkout:…Restores your ticket selection if you sign in during checkout.
Bunny Riot · Local storage · Up to 24 hours
br:post-verify-returnReturns you to the appropriate page after you verify your email address.
Bunny Riot · Local storage · Until email verification
__stripe_midUsed by Stripe, our payment processor, to detect and prevent fraud.
Stripe · Cookie · 1 year
__stripe_sidUsed by Stripe to detect and prevent fraud during a checkout session.
Stripe · Cookie · 30 minutes
__ph_opt_in_out_<project key>Written when you withdraw analytics consent, so that PostHog remains disabled. It stores your preference only, not analytics data.
PostHog · Local storage · Until cleared
Analytics
Analytics cookies are not set until you accept them. If you later withdraw your consent, the cookies and browser storage below are deleted.
ph_<project key>_posthogDistinguishes visits and associates page views within a session, so that we can measure feature use and diagnose errors.
PostHog · Cookie and local storage · 1 year
ph_…Maintains state for the current browser tab.
PostHog · Session storage · End of tab session
We also use Vercel Analytics to measure page views on an anonymous, aggregated basis. It does not use cookies or browser storage and is designed not to identify individual users, so it operates before you make a cookie choice. Selecting "Only necessary", or turning off Analytics, disables it.
Cookies Set on Third-Party Domains
Google Maps, Google sign-in, and Stripe may also set cookies on their own domains. Those cookies are not listed here, are governed by the respective provider's policies, and are not affected by your Bunny Riot cookie preferences. For more information, see how Google uses cookies and Stripe's Cookie Policy.