In short
- We use no analytics, advertising or tracking cookies.
- Essential cookies keep you signed in, protect the site and card payments, and remember your cookie choices.
- Preferences, such as your theme, are stored only if you allow them.
- You choose on your first visit, and you can change your mind at any time.
What cookies are
Cookies are small text files a website stores in your browser so it can recognize your browser later, for example to keep you signed in. Websites can also keep information in your browser's local storage, which works in a similar way. This policy covers both and should be read with our Privacy Policy.
Some cookies are strictly necessary: a service can't work without them, so the law doesn't require your consent for them. Others need your consent. The only optional kind Rabbitflare uses is preferences, which let the control panel remember choices you make. We ask before storing them.
Your cookie choices
On your first visit, a banner asks what you allow: Accept all, Essential only, or Customize to choose by category. Nothing optional is stored until you allow it, and no option is pre-selected. Your choice applies to both rabbitflare.com and the control panel, and we ask again after a year or if we change how we use cookies.
To change your mind, use Cookie settings at the bottom of any page, or the button below. Withdrawing consent is as easy as giving it, and when you turn preferences off we delete what they had stored.
Your choice itself is kept in this cookie, so we don't have to ask on every visit:
| Name | Purpose | Duration | Type |
|---|---|---|---|
rf_consent | Remembers which categories you allowed, and when. It holds no identifier and is shared by rabbitflare.com and app.rabbitflare.com. | 1 year | Strictly necessary |
On rabbitflare.com
Our homepage and these legal pages set no cookies of their own until you answer the cookie banner, and then only rf_consent
to remember your answer. They use no local storage and load no third-party scripts, analytics, fonts or embeds: everything is served from
rabbitflare.com itself.
Our pages are delivered through Cloudflare's network, which DigitalOcean uses for its hosting. Cloudflare sets one security cookie on every Rabbitflare page, including the control panel:
| Name | Set by | Purpose | Duration |
|---|---|---|---|
__cf_bm | Cloudflare | Tells people from automated bots, to protect the site from abuse. It doesn't track you across websites. Strictly necessary. | 30 minutes |
Cloudflare explains it in its cookie documentation.
In the control panel
The control panel at app.rabbitflare.com uses this cookie:
| Name | Purpose | Duration | Type |
|---|---|---|---|
__Host-rb_session | Keeps you signed in and protects your account. It is secure, HttpOnly and SameSite, so it's only sent over HTTPS to the control panel and can't be read by scripts. | 30 days, or until you sign out | Strictly necessary |
If you allow preferences, it also keeps these in your browser's local storage. They never leave your browser. Without your permission they aren't kept, so your theme and notifications reset when you come back.
| Name | Purpose | Duration | Type |
|---|---|---|---|
theme | Remembers whether you chose the light or dark theme. | Until you clear it | Preferences (optional) |
events-seen-at | Remembers when you last opened your notifications, so new ones can be marked as unread. | Until you clear it | Preferences (optional) |
Card payments (Stripe)
Card, Apple Pay and Google Pay payments are handled by Stripe. Stripe's code loads only on the pages where you pay for a server or save a card, and it sets these cookies to detect and prevent fraud. The payment can't be made safely without them, so they are strictly necessary:
| Name | Set by | Purpose | Duration |
|---|---|---|---|
__stripe_mid | Stripe | Fraud prevention: recognizes your browser across payments. | 1 year |
__stripe_sid | Stripe | Fraud prevention: identifies your current payment session. | 30 minutes |
Stripe's secure card form runs in frames served by Stripe, which may set further cookies of Stripe's own for the same purposes. Stripe decides how that information is used, as described in its Cookie Policy and Privacy Policy.
PayPal
If you choose PayPal, you approve the payment on PayPal's own website. PayPal sets its cookies there, under PayPal's privacy statement and cookie settings. We don't place PayPal cookies on our pages.
Cookies on your websites
The WordPress sites you host with Rabbitflare set their own cookies. WordPress uses them for logins and comments, and plugins such as analytics or shopping carts may add more. You control those cookies, and you're responsible for telling your visitors about them and asking for consent where the law requires. We don't add any cookies to your sites.
Managing cookies
Use Cookie settings at the bottom of any page to change what you allow. You can also see and delete cookies and local storage in your browser's settings, and block cookies for any website. If you block the session cookie, you won't be able to sign in to the control panel. If you block Stripe's cookies, card payments may fail Stripe's fraud checks; you can still pay with PayPal. Clearing local storage simply resets your theme and notification preferences.
Changes and contact
If we start using a new kind of cookie, we'll update this policy first, and if it isn't strictly necessary we'll ask for your consent again before using it. Questions? Email [email protected]. Rabbitflare is operated by Rabbit Rank LLC.