Legal

Cookies Used on Bunny Riot

Bunny Riot Experiences Inc. — Last updated: September 28, 2026

This page lists the cookies and browser storage used in connection with the Bunny Riot website and related services (the "Services"), grouped by category. Our Cookie Policy describes the purposes for which we use them and the choices available to you.

Essential

Essential cookies and browser storage are strictly necessary to provide the Services. They cannot be disabled through our cookie preferences.

  • __Secure-authjs.session-token

    Maintains your authenticated session.

    Bunny Riot · Cookie · 30 days

  • __Host-authjs.csrf-token

    Protects sign-in against cross-site request forgery.

    Bunny Riot · Cookie · End of browser session

  • __Secure-authjs.callback-url

    Returns you to the page you were viewing after you sign in.

    Bunny Riot · Cookie · End of browser session

  • __Secure-authjs.pkce.code_verifier

    Secures the authentication exchange when you sign in with Google.

    Bunny Riot · Cookie · 15 minutes

  • br_active_partner

    Records which partner account you are managing, where you have access to more than one.

    Bunny Riot · Cookie · 30 days

  • br_marketing_optin

    Preserves your marketing email preference while you complete sign-up with Google.

    Bunny Riot · Cookie · 10 minutes

  • br_cookie_consent

    Stores your cookie preferences for each optional category.

    Bunny Riot · Cookie · 1 year

  • theme

    Stores your display theme preference (light or dark).

    Bunny Riot · Local storage · Until cleared

  • br:store-cart:…

    Retains the contents of your cart for each store until checkout.

    Bunny Riot · Local storage · Up to 7 days

  • br:pending-checkout:…

    Restores your ticket selection if you sign in during checkout.

    Bunny Riot · Local storage · Up to 24 hours

  • br:post-verify-return

    Returns you to the appropriate page after you verify your email address.

    Bunny Riot · Local storage · Until email verification

  • __stripe_mid

    Used by Stripe, our payment processor, to detect and prevent fraud.

    Stripe · Cookie · 1 year

  • __stripe_sid

    Used by Stripe to detect and prevent fraud during a checkout session.

    Stripe · Cookie · 30 minutes

  • __ph_opt_in_out_<project key>

    Written when you withdraw analytics consent, so that PostHog remains disabled. It stores your preference only, not analytics data.

    PostHog · Local storage · Until cleared

Analytics

Analytics cookies are not set until you accept them. If you later withdraw your consent, the cookies and browser storage below are deleted.

  • ph_<project key>_posthog

    Distinguishes visits and associates page views within a session, so that we can measure feature use and diagnose errors.

    PostHog · Cookie and local storage · 1 year

  • ph_…

    Maintains state for the current browser tab.

    PostHog · Session storage · End of tab session

We also use Vercel Analytics to measure page views on an anonymous, aggregated basis. It does not use cookies or browser storage and is designed not to identify individual users, so it operates before you make a cookie choice. Selecting "Only necessary", or turning off Analytics, disables it.

Cookies Set on Third-Party Domains

Google Maps, Google sign-in, and Stripe may also set cookies on their own domains. Those cookies are not listed here, are governed by the respective provider's policies, and are not affected by your Bunny Riot cookie preferences. For more information, see how Google uses cookies and Stripe's Cookie Policy.