Cookie notice
What this site stores on your device, and the one thing we ask.
By default this site sets no advertising cookies and loads nothing from other companies. There are two optional things, and each runs only if you choose it: anonymous measurement of which version of a page works better (Help improve the shop), and the Meta advertising pixel (Accept all, incl. ads). The lists below are complete.
What we do not use
Unless you press Accept all, incl. ads (see Advertising pixel below), none of the following runs:
- No outside analytics — no Google Analytics, Plausible, Matomo or anything equivalent. The optional measurement below is our own and stays with us.
- No advertising or retargeting pixels unless you allow the one below — and never a Google Ads tag or a TikTok pixel.
- No social media embeds or share widgets.
- No heatmaps, no session recording, no screen or mouse recording, no fingerprinting.
- No third-party scripts, with one exception you have to switch on yourself: Meta's pixel script. The content security policy on this site blocks every other outside script, so one cannot be added by accident.
- No cross-site tracking, no profiling, no automated decision-making.
The only advertising tool on this site is the Meta pixel described below, and it stays off until you turn it on.
What is stored, and why
All of the following lives in your own browser's local or session storage. None of it is transmitted to us, and none of it identifies you.
| Key | What it holds | Why | Lasts |
|---|---|---|---|
onyx-bunny-age-confirmed | That you confirmed you are 18+ | So you are not asked on every page | Until you clear site data |
ob-cart | Your basket contents | So the basket survives a page change | Until you clear it or order |
ob-currency | EUR or CAD display preference | To show prices the way you chose | Until changed |
ob-cookie-notice-dismissed | That you dismissed this notice | So it does not return | Until you clear site data |
ob-recently-viewed | The last few product ids you opened | The "recently viewed" row | Last 6 items |
ob-promo-seen | When the €10 sign-up pop-up was last shown or closed | So it opens by itself at most once every 30 days | Until you clear site data |
ob-promo-signed-up | That you signed up through the pop-up | So the pop-up and its button do not come back | Until you clear site data |
ob-orders | A non-personal receipt for orders placed on this device | So you can see an order you placed as a guest | Until you clear site data |
ob-private-profile:… | Your saved address, wishlist and order history — encrypted | Optional account, if you create one | Until you sign out or clear site data |
| Game storage | Settings and progress for the couples game | So the game remembers where you were | Until you clear site data |
Different versions of a page, and anonymous totals
To learn which wording or layout is clearer, visitors are shown one of two to four versions of some marketing elements — a headline, a button label, a banner. Prices, product facts, tax, shipping, returns, safety information and the checkout are never part of this.
Without your yes, nothing is stored on your device for this and nothing is linked to you: each page view simply shows a version at random, and we count only daily totals per version — for example "version B shown 500 times, its button clicked 40 times". No cookie, no identifier, no IP address.
In the same way we count daily totals of steps on shop pages, such as "a size was picked on the shoe page" or "the checkout button was pressed". Each step is counted at most once per page view and is not linked to you, your device or your other visits.
Optional: detailed anonymous measurement (only if you say yes)
We sometimes show two to four versions of a page — a different headline or button text, for example — to learn which one people find clearer. If you press Help improve the shop, these are set as first-party cookies on onyxbunny.com:
| Cookie | What it holds | Why | Lasts |
|---|---|---|---|
ob_consent | Your choice: yes or no | So we do not ask again. Set whichever button you press. | 180 days |
ob_vid | A random code, for example k3v9…. Not linked to your name, email, order or IP address | To count you once per test and keep you on the same version | 30 days |
ob_x | Which version of each running test you are shown | So a page does not change between visits | 30 days |
ob_sid (session storage) | A random code for this browser tab | To tell one visit from the next | Until the tab closes |
With that code we record: which pages you open, which version you saw, which links and buttons you click (and, when a click does nothing, which part of the page was clicked, so we can fix confusing spots), how many seconds you were actively looking at a page and how far down you scrolled. We do not record what you type, your IP address, your device, your location or anything that identifies you, and there are no recordings of your screen. If you order, the order stores only which versions you saw — never the measurement code — so your browsing is not linked to your name.
The data is held by Cloudflare in the EU on our behalf, is used only to compare page versions, is never shared or sold, and raw events are deleted after 90 days.
Only necessary (or the ×) stores just your "no", and nothing is measured. Either way the shop works exactly the same.
Advertising pixel (Meta), only if you allow it
If you press Accept all, incl. ads on the notice, this site loads a small script from Meta Platforms (Facebook and Instagram). It tells Meta that a browser visited this shop and which of these steps happened: a page was opened, a product was viewed, something was added to the bag, checkout was started, an order was placed (with the order total). We use it to see whether our adverts work and to show our adverts to people who visited.
What that means for you: Meta receives your IP address and browser details as part of loading the script, sets its own cookies, and can connect the visit to your Facebook or Instagram account if you have one. This is an adult shop, so the visit itself says something personal. That is why the pixel is off unless you choose it. We never send Meta your name, email, phone number or address.
| Cookie | What it holds | Why | Lasts |
|---|---|---|---|
ob_ads | Your choice about the advertising pixel: yes or no | So we do not ask again | 180 days |
_fbp | A random identifier set by Meta's script | Lets Meta recognise the same browser on this site | 90 days |
_fbc | The click identifier, if you arrived from one of our adverts | Links the visit to that advert | 90 days |
Recipient: Meta Platforms Ireland Ltd, which may transfer data to Meta Platforms, Inc. in the United States. Legal basis: your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time here. The shop works exactly the same with the pixel off.
Advertising pixel is currently: Off
Why we only ask about measurement
Article 5(3) of the ePrivacy Directive requires consent for storage on your device except where it is strictly necessary to provide a service you explicitly requested. A basket, a currency preference and an age confirmation are exactly that. Since we store nothing else, there is nothing left to ask you about, and a banner demanding consent for storage that needs none would be theatre.
Measurement is not necessary for the shop to work, so it needs your consent, and it is off until you give it. The notice offers both choices with equal weight. You can change your mind at any time with the button above; choosing no deletes the measurement cookies from your browser.
Removing it
Use your browser's site-data settings to clear everything this site has stored. Be aware that doing so also deletes your local account record and your saved game progress, and that cannot be undone because we hold no copy.
Private or incognito windows discard all of it when you close them, and the site works normally in one.
Questions
Email [email protected]. See also the privacy policy.