Important: This page is a product privacy notice for CDN BUNNY. It is not legal advice. If you need jurisdiction-specific counsel (including Quebec Law 25 or state privacy statutes), consult a qualified attorney.
1. Who we are / controller
CDN BUNNY operates https://cdnbunny.com and the analytics workspace. Privacy contact: [email protected] · General: [email protected] · Contact form.
2. Scope
This policy covers our public website, cookie banner, contact forms, account/workspace use, and service telemetry we process as a service provider. Where we process customer data solely on a customer’s instructions, that customer is typically the “business” / “controller,” and we act as a “service provider” / “processor.”
3. Categories of personal information
- Identifiers — name, email, account ID, IP address, device identifiers.
- Commercial / account data — plan, billing metadata, support tickets (when billing is enabled).
- Internet / network activity — pages viewed, referrers, approximate location derived from IP, browser/OS, diagnostic logs, edge delivery and analytics events.
- Communications — messages you send via contact forms or email.
- Inferences — limited product-usage insights (for example feature adoption) to improve reliability.
We do not intentionally collect sensitive personal information (SSN, precise geolocation, health, biometric, or government ID) through the public site. Do not submit such data in forms.
4. Sources
Directly from you; automatically from your device/browser; from service providers (hosting, DNS/CDN such as Cloudflare, email delivery); and from your authorized workspace users.
5. Purposes of use
- Provide, secure, operate, and improve CDN BUNNY.
- Authenticate accounts and prevent fraud, abuse, and security incidents.
- Respond to support, privacy, legal, and abuse requests.
- Send transactional messages (account, security, billing). Marketing emails only with consent where required (see CASL / CAN-SPAM below).
- Comply with law, enforce terms, and protect rights and safety.
- Measure site performance with optional analytics cookies only after consent (see Cookie Policy).
6. Disclosures / service providers
We may disclose personal information to infrastructure and operations providers (hosting, CDN/DNS, email, security) under contracts that restrict use to providing services to us. We may disclose information if required by law, legal process, or to protect CDN BUNNY, users, or the public. We do not sell personal information for money. See Do Not Sell or Share for California “sale”/“sharing” choices.
7. Cookies and similar technologies
Essential cookies are required for security and consent storage. Analytics and advertising/measurement tags (including Google tags, if enabled) load only after you accept optional cookies. Details: Cookie Policy.
8. United States — CCPA / CPRA and state privacy laws
If you are a California resident (and where similar state laws apply, such as Virginia, Colorado, Connecticut, Utah, and others), you may have rights to:
- Know / access the categories and specific pieces of personal information we collected.
- Delete personal information (subject to exceptions).
- Correct inaccurate personal information.
- Opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising.
- Limit use of sensitive personal information (if we ever collect it).
- Non-discrimination for exercising privacy rights.
To exercise rights: email [email protected], use Contact (topic: Privacy), or visit Do Not Sell or Share. We will verify requests as required by law. Authorized agents may submit requests with proof of authority.
Notice at collection: We collect the categories in Section 3 for the purposes in Section 5. Retention periods vary by category (account life + up to 24 months for logs unless a longer period is required for security/legal holds).
Global Privacy Control (GPC): Where required, we treat a browser GPC signal as an opt-out of sale/sharing for that browser.
9. United States — COPPA
CDN BUNNY is directed to businesses and adult operators. We do not knowingly collect personal information from children under 13. If you believe a child provided data, contact [email protected] and we will delete it.
10. Canada — PIPEDA and provincial privacy laws
For individuals in Canada, we process personal information in accordance with PIPEDA and applicable provincial laws (including Quebec’s Law 25 where it applies). We identify purposes at or before collection, limit collection to what is needed, use consent or another lawful basis where available, safeguard information, and provide access and correction on request.
Quebec (Law 25): Where we are subject to Law 25, you may request access, rectification, and withdraw consent for secondary uses. Contact [email protected]. We assess privacy impacts for higher-risk processing when required.
11. Canada — CASL and U.S. CAN-SPAM
Commercial electronic messages to Canadian addresses are sent only with express or implied consent as allowed by CASL, and include identification and an unsubscribe mechanism. U.S. marketing emails comply with CAN-SPAM (accurate headers, physical postal address when required, and working opt-out). Transactional/service messages may be sent without marketing consent.
12. Retention
We retain personal information only as long as needed for the purposes above, then delete or de-identify it, unless a longer retention period is required by law, dispute resolution, or security investigation.
13. Security
We use encryption in transit (TLS), access controls, and operational safeguards. No method of transmission or storage is 100% secure.
14. International transfers
Information may be processed in the United States, Canada, and other countries where we or our providers operate. Cross-border transfers are protected by contractual and technical safeguards appropriate to the risk.
15. Your choices
- Cookie settings (footer “Cookie settings” or Cookie Policy).
- Do Not Sell or Share (California / similar state laws).
- Email unsubscribe links in marketing messages.
- Access, correction, deletion, and portability requests via [email protected].
16. Changes
We may update this policy. The “Last updated” date at the top will change when we do. Material changes affecting rights will be highlighted on this page or via email where appropriate.
17. Contact
Privacy: [email protected] · Legal: [email protected] · Contact.