Cookie Policy

Version 2.0Effective Date: October 8, 2026Last updated: September 8, 2026

1. About this policy

This Cookie Policy explains how Bumpy and Wonder use cookies and similar technologies on our websites (https://bumpy.app and https://wonder.dating) and in the Bumpy and Wonder mobile Apps. It should be read together with our combined Privacy Policy, which explains in more detail how we handle your personal data, your rights and how to contact us.

2. Who we are

This Cookie Policy is issued by Bumpy Inc. (Delaware, USA) and MV Bumpy Group Limited (Cyprus) in respect of both the Bumpy and the Wonder App and Site. The controller responsible for your region (and any joint controllership arrangements, where applicable) are described in our Privacy Policy, and apply on the same basis whether you use Bumpy or Wonder.

Contact us by email at [email protected].

3. What cookies and similar technologies are

  • Cookies are small text files stored in your browser when you visit a website.
  • SDKs are software libraries bundled into a mobile app that perform similar functions to cookies.
  • Pixels, tags and local storage are other technologies that read or write information on your device.

We call all of these "cookies" in this policy unless we say otherwise.

4. First-party and third-party cookies

  • First-party cookies are set by Bumpy or Wonder (the domain you visit).
  • Third-party cookies/SDKs are set by our partners (for example, analytics and advertising providers) when those tools are enabled.

5. Why we use cookies

We use cookies to:

  • Make the Service work (logging you in, keeping the App stable, processing payments, preventing fraud);
  • Understand how the Service is used so we can improve it;
  • Measure marketing campaigns and (if you opt in) show you relevant ads on third-party platforms.

6. Categories of cookies we use

CategoryWhat it doesWhen it runsExample vendors
EssentialRequired for the Service to work - log-in/session, language, security, fraud-prevention, payment processingAlways on for core functions. You can block them via browser/device settings, but parts of the Service may not workCloudflare (CDN / security), our authentication provider, our payment processors
StatisticsHelps us understand how Users use the Service so we can improve it (page/screen views, crash reports, attribution of installs)Off by default in the EEA, UK and Switzerland. Runs only after you opt inGoogle Analytics, Firebase, attribution providers (e.g. AppsFlyer, Adjust, Singular), Rollbar
MarketingMeasures advertising campaigns and (where you allow it) shows you personalised ads on third-party platformsOff by default in the EEA, UK and Switzerland. Runs only after you opt in. iOS App Tracking Transparency also applies on Apple devicesMeta (Facebook) Pixel/SDK, TikTok Pixel, Google Ads / AdMob, ad networks and retargeting partners, advertising attribution SDKs (e.g. AppsFlyer, Adjust, Singular), AppLovin

The exact list of vendors, cookie/SDK names, purposes, and retention periods evolves over time and may differ slightly between the Bumpy and Wonder banners depending on which vendors are active on each App/Site at a given time.

7. How long cookies last

  • Session cookies are deleted when you close your browser (or close the App session).
  • Persistent cookies stay on your device for a set time.

8. Your choices

When you first visit bumpy.app or wonder.dating, or first open the Bumpy or Wonder App in a region where required, we show a cookie banner with three buttons presented together on that first layer: "Accept All," "Reject All," and "Customize Preferences." The "Reject All" button lets you decline all non-essential cookies in a single click, with the same visual prominence as "Accept All" - you do not have to click through a settings menu to reject. Statistics and Marketing cookies are switched OFF by default in the EEA, the UK and Switzerland, and no Statistics or Marketing cookies, SDKs, pixels or tags load or fire before you give consent (i.e. before you click "Accept All" or selectively enable a category in "Customize Preferences"). A persistent "Cookie Settings" link remains available in the website footer on every page of both bumpy.app and wonder.dating so you can change your choice at any time. California residents additionally have a dedicated "Do Not Sell or Share My Personal Information" control, described further below, to opt out of the relevant disclosures.

ChoiceHow it works
Cookie bannerOn your first visit to either website (and on first launch of either App in regions where required) you will see a banner with three options on the same layer: "Accept All," "Reject All," and "Customize Preferences." We present "Accept All" and "Reject All" with comparable prominence and friction, and Statistics/Marketing cookies remain off by default and do not load until you opt in.
Change at any timeA persistent Cookie Settings link is available in the website footer on every page of both bumpy.app and wonder.dating. Your new choice replaces the previous one. You can withdraw your consent at any time; withdrawal does not affect processing that took place before you withdrew.
iOS App Tracking TransparencyOn iOS, the operating system asks whether to allow tracking across other apps and websites. We follow your choice in addition to your cookie choices, on either App.
Global Privacy Control (GPC)Where required by law (including California), we honour GPC signals received from your browser by treating them as a request to opt out of certain types of data sharing/targeted advertising for the browser/device sending the signal.
Do Not Sell or Share My Personal InformationWhere required by law (including certain U.S. state privacy laws), we provide a “Do Not Sell or Share My Personal Information” control to opt out of certain disclosures of personal information for cross-context behavioural advertising/targeted advertising. This setting may also be exercised via Global Privacy Control (where applicable).
Browser controlsYou can block or delete cookies through your browser. Doing so may break parts of the website (for example, log-in).

9. Deleting non-essential cookies after you opt out

If you change your preferences to switch off Statistics or Marketing cookies, we stop using those technologies going forward, on the App/Site where you changed your preference. Where feasible, we also delete or disable non-essential cookies already stored on your device (some deletion may require using your browser/device controls).

10. Do Not Track

Some browsers offer a "Do Not Track" signal. There is no consistent industry standard for responding to it, so we do not respond to Do Not Track. Please use Cookie Settings and your browser/device controls instead.

11. Legal bases (EEA / UK / Switzerland)

  • Essential cookies: necessary to provide the Service you request and to protect the Service (for example, security and fraud prevention).
  • Statistics and Marketing cookies: used only with your consent, where consent is required.

12. International transfers

Some cookie vendors are located outside the EEA, the UK or Switzerland. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses (with the UK Addendum / Swiss Addendum, as applicable). Some vendors may also participate in the EU-US Data Privacy Framework (with its UK and Swiss extensions). See Section 15 of our Privacy Policy for more.

13. App-specific notes (SDKs and device identifiers)

In the Bumpy and Wonder mobile apps we use third-party SDKs and similar technologies. Depending on your region and choices, they may access or generate device identifiers (or similar IDs) and collect usage and advertising-related information.

Examples of SDK vendors we may use (on either App):

  • Google Firebase (analytics and related tools, including push notifications);
  • Google Analytics (web analytics);
  • AppsFlyer (attribution);
  • Adjust (attribution);
  • Meta (Facebook) SDK (marketing measurement and attribution);
  • Singular (attribution);
  • Google AdMob SDK (advertising).

Events and measurement: we may send conversion and usage events to our analytics and attribution partners (for example, Meta, Google/Firebase and Singular) where enabled.

Where enabled, we may also use pixels/tags on the website (such as Meta Pixel and TikTok Pixel) and similar technologies to measure campaigns, support retargeting, and enable cross-context behavioural advertising/targeted advertising.

Device identifiers: SDKs may use device identifiers to support analytics, attribution, fraud prevention, and advertising. For example:

  • on Android, this may include the device advertising ID;
  • on iOS, Apple's App Tracking Transparency (ATT) prompt may apply, and your iOS settings also affect which identifiers can be accessed.

Some SDKs may store or access identifiers in a way that can persist on your device until deleted (for example, to detect repeated registrations from the same device - including checks that may be run across both Bumpy and Wonder to prevent abuse; see Section 14).

WebRTC in-app calls: if you use in-app calling features, the app may use WebRTC for peer-to-peer communication. We may use our servers as intermediaries/relays so your IP address is not disclosed to the other user.

14. Shared use across Bumpy and Wonder

Bumpy and Wonder are operated by the same corporate group on shared infrastructure. Some cookies, SDKs and vendors (for example, fraud-prevention and core analytics tooling) may be used in common across both Apps to help us detect abuse (such as repeated fake registrations across both Apps) and to operate shared backend services. Marketing/advertising cookies and SDKs are configured, and your consent choices are recorded, separately for each App/Site; opting in or out of Statistics or Marketing cookies on one App does not automatically change your preference on the other. This section should be read together with the cross-app profile-visibility disclosure in Section 6 of our Privacy Policy.

15. Your rights

Cookies that read or write personal data are covered by your data subject rights. See Sections 18-21 of the Privacy Policy for how to exercise them, including how to complain to your supervisory authority.

16. Updates

We will update this policy when we add or remove vendors or categories, or when the law changes. The current version and effective date are shown at the bottom of this page.

17. Contact

If you have any questions or suggestions about our Cookie Policy, please contact us at [email protected]

Bumpy Inc. - 1007 N Orange St. 4th Floor, Wilmington 19801 Delaware, United States (controller for Users of Bumpy or Wonder outside the EEA, UK and Switzerland)

MV Bumpy Group Limited - Strovolou 77, 4th floor, office 401, 2018 Nicosia, Cyprus (controller for EEA, UK, and Swiss Users of Bumpy or Wonder)