Cookies are small text files placed on your device by your browser. They allow websites to remember preferences and maintain sessions. BunnyRadio also uses your browser's localStorage for analytics preferences — localStorage works similarly to cookies but is managed entirely by the browser.
These cookies are required for the Service to function. They cannot be disabled.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| token | Authentication session (HTTP-only, secure) | 1 day (30 days with Remember Me) | Essential |
| user_display | Display name and role indicator (client-readable, not HTTP-only) | 1 day (30 days with Remember Me) | Essential |
| CloudFront access cookies (3) | Secure access to time-shifted streams via CDN | Session | Essential |
| Paddle cookies | Checkout functionality and fraud prevention | Session | Essential |
rsr_attr | First-party attribution cookie. Consolidates ad-click identifiers (fbclid, gclid, rdt_cid) on first visit to attribute sign-ups and subscriptions to the correct ad campaign. No personal data is stored; the value is the raw click ID from the landing URL. | 90 days | Necessary / Marketing |
When you grant analytics consent via the cookie banner, Google Analytics sets the following HTTP cookies. These are cleared immediately if you revoke consent.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
_ga | Google Analytics client identifier. Distinguishes unique users across sessions. | 180 days | Analytics (opt-in) |
_ga_<ID> | Per-stream variant of the Google Analytics client identifier. Same purpose, scoped to a specific data stream. | 180 days | Analytics (opt-in) |
_gid | Google Analytics session identifier. Distinguishes unique users within a 24-hour window. | 24 hours | Analytics (opt-in) |
_gat | Google Analytics throttle cookie. Limits the rate of requests sent to Google. | 1 minute | Analytics (opt-in) |
When you grant analytics consent via the cookie banner, we store the following in your browser's localStorage:
| Key | Purpose | Duration | Type |
|---|---|---|---|
| bunnyradio_cid | Anonymous client identifier (random UUID, not linked to your account). Removed when analytics consent is revoked. | Until consent revoked | Analytics (opt-in) |
| bunnyradio_consent_v2 | Keeps your cookie preference and consent timestamp | 6 months (auto-renewal prompt) | Essential |
When you grant marketing consent via the cookie banner, Meta Pixel, Reddit Pixel, and Google Ads set the following HTTP cookies. These are cleared immediately if you revoke consent.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
_fbp | Meta Pixel browser identifier. Used to measure ad effectiveness and attribute conversions from Meta advertising campaigns. | 90 days | Marketing (opt-in) |
_rdt_uuid | Reddit Pixel visitor identifier. Used to measure ad effectiveness and attribute conversions from Reddit advertising campaigns. | 90 days | Marketing (opt-in) |
_gcl_aw | Google Ads click attribution. Stores the Google Click Identifier (gclid) from an ad click to attribute conversions. | 90 days | Marketing (opt-in) |
_gcl_au | Google Analytics/Ads first-party measurement. Used to improve ad targeting and measure conversion events across Google services. | 90 days | Marketing (opt-in) |
The Reddit Pixel (_rdt_uuid) is only loaded after you grant marketing consent. The rdt_cid URL parameter (present on Reddit Ads click-through URLs) is processed server-side for ad-click attribution under legitimate interest (GDPR Art. 6(1)(f)) — it is not stored as a cookie. Similarly, the gclid URL parameter (present on Google Ads click-through URLs) is processed server-side under legitimate interest (GDPR Art. 6(1)(f)) — it is not stored as a cookie beyond the rsr_attr first-party attribution cookie described above.
Paddle sets its own cookies during the checkout process for fraud prevention and session management. These are managed entirely by Paddle as our Merchant of Record. See Paddle's Privacy Policy for details.
You can manage your cookie and analytics preferences at any time:
When you opt in to marketing cookies, BunnyRadio uses Meta Pixel, Reddit Pixel, and Google Ads to measure ad effectiveness. This is strictly opt-in — no marketing cookies are set without your explicit consent. Google Ads Enhanced Conversions sends a hashed email address and billing country/postal code to Google Ireland Limited for conversion match-back when marketing consent is granted. Our analytics (Google Analytics 4) are also opt-in only, use a server-side proxy, and transmit only anonymous data (page views and conversion events). No personally identifiable information is included in analytics data.
In addition, engagement interaction signals (station changes, playback controls, and similar in-app events) are sent server-side to Meta, Reddit, and Google Ads under legitimate interest (GDPR Art. 6(1)(f)) — this processing does not require marketing consent and does not set any new cookies. Existing attribution identifiers (fbclid, gclid, rdt_cid) are reused where present. You may object to this processing at any time via support@bunnyradio.com.
For full details on how we collect, use, and protect your data, see our Privacy Policy.