Cookie Policy

Last updated · May 1, 2026

This Cookie Policy explains how US Precision Peptides (“USPP,” “we,” “us”) uses cookies, similar tracking technologies, and a session-recording tool on usprecisionpeptides.com (the “Site”). It supplements our Privacy Policy.

By using the Site, you agree to the use of cookies and tracking technologies as described below, subject to the choices you make in our consent banner.

01.What are cookies and similar technologies?

A cookie is a small text file that a website stores on your browser. Cookies allow a site to recognize your browser across pages and sessions, remember preferences, and collect analytics about how the Site is used.

We also use technologies that are not cookies but serve similar purposes for the purposes of this policy:

02.Categories of cookies and tracking we use

We group cookies and tracking into two categories. You can accept or reject each category independently using the Cookie Preferences link in the footer or by clicking the cookie icon at any time.

2.1 Strictly necessary (always on)

These are required for the Site to function. They do not require your consent under GDPR Article 5(3) or under CCPA, because they are necessary to deliver a service you have explicitly requested (such as adding a product to your cart or completing checkout).

Cookie / Storage Purpose Duration
uspp-cart Stores cart contents during a session Session
uspp-age-verified Records that you have confirmed you are 21 or older 30 days
connect.sid Express server session identifier Session
uspp_consent_mode Records detected jurisdiction (gdpr / ccpa / none) so the consent banner shows the correct variant. Set server-side from the visitor's IP region. 1 day
uspp_gpc Records that your browser sent the Global Privacy Control signal. Causes analytics to remain off and the banner to be suppressed. 1 day (only set if GPC was sent)
uspp_consent_v2 (localStorage) Records your cookie-consent choice 12 months
uspp_aff_ref First-touch affiliate revenue-share attribution. Captures the ?ref= value from the URL the first time you arrive at the Site (later ?ref= values do not overwrite it). Cleared at account registration when the value is recorded to your account record. HttpOnly; SameSite=Lax; Secure in production. 30 days, or until account registration completes — whichever comes first
uspp_account_csrf Cross-site-request-forgery token paired with the form fields on the account-access pages (register, sign-in, forgot, reset). SameSite=Lax. 1 hour, or until consumed

You cannot disable strictly necessary cookies without breaking core Site functionality (cart, checkout, age gate).

2.2 Analytics and session recording (consent required)

These are off by default and only load after you accept them in the consent banner. They help us understand how researchers use the Site, identify usability problems, and improve the experience. They are not used for advertising and we do not share or sell this data.

Microsoft Clarity (session recording, heatmaps)

Clarity records your session — including mouse movement, clicks, scroll depth, and the timing of form-field interactions — to generate heatmaps and watchable session replays. Form input values are masked by default; we do not record passwords, payment-card numbers, or sensitive personal information. Recording quality is reduced over time and recordings are retained for 13 months.

Cookie Purpose Duration
_clck Persistent user identifier for Clarity 1 year
_clsk Connects multiple page views into a single session recording 1 day
CLID First-party Clarity session linker 1 year
MUID Microsoft user identifier (synchronized with Bing) 1 year
ANONCHK Indicates the MUID has been transferred to ANID for advertising synchronization (we do not opt into this) 10 minutes
SM Used by Clarity to sync the MUID across Microsoft domains Session

Provider: Microsoft Corporation. Data may be transferred to and processed in the United States. See Microsoft's privacy statement.

Google Analytics 4

GA4 collects aggregate, pseudonymous information about pages visited, time on site, device type, and traffic source. We have IP anonymization enabled and have disabled Google Signals, ads personalization, and remarketing features.

Cookie Purpose Duration
_ga Distinguishes unique users 2 years
_ga_<measurement-id> Persists session state for GA4 2 years

Data retention: 14 months. Provider: Google LLC. See Google's privacy policy and how Google uses data.

Umami

Umami is a privacy-respecting, cookieless analytics tool that records page views and aggregate referrer / location / device data. It does not set cookies, does not use fingerprinting, and does not collect personal data. It is grouped under “Analytics” for unified user choice; if you reject analytics, we will not load Umami either.

Provider: self-hosted by USPP. No third-party data transfer.

03.How to manage your preferences

You can change your choices at any time by:

  1. Clicking Cookie Preferences in the Site footer.
  2. Clearing your browser's cookies and local storage, which will cause the consent banner to reappear on your next visit.
  3. Using your browser's privacy settings to block cookies globally — note that this may break parts of the Site that rely on strictly necessary cookies (e.g., cart, checkout).

Browser-level controls

Global Privacy Control (GPC)

We honor the Global Privacy Control signal. If your browser sends a GPC signal — either via the Sec-GPC: 1 request header or via navigator.globalPrivacyControl — we treat it as a CCPA opt-out request and will not load analytics or session recording, regardless of your jurisdiction. The consent banner will not appear. You can override this from the Cookie Preferences link in the footer if you want to opt back in.

Do Not Track (DNT)

We do not currently respond to DNT browser signals, because DNT lacks a clear standard. We honor GPC instead, which provides the equivalent right.

04.How we decide which banner to show

We detect your jurisdiction from your IP address (country and US state, where applicable) at the time of your request. Based on that detection, the Site does one of three things:

If we cannot detect your location, we default to the strictest treatment (full opt-in banner).

05.Your rights

European Economic Area, United Kingdom, Switzerland (GDPR / UK GDPR)

You have the right to:

To exercise any of these rights, contact info@usprecisionpeptides.com.

California (CCPA / CPRA)

California residents have the right to:

We do not sell your personal information. Rejecting analytics in the consent banner also exercises your CCPA right to opt out of “sharing” for cross-context behavioral advertising.

To exercise these rights, contact info@usprecisionpeptides.com or use the form linked in our Privacy Policy.

Other jurisdictions

If you are subject to a privacy law not listed here (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, etc.), you may have similar rights. Contact us using the address above.

06.Third-party links and embedded content

Pages on this Site may link to third-party services (Microsoft Clarity, Google, payment processors, etc.). When you visit those services, their own cookie policies apply. We are not responsible for the privacy practices of third parties.

07.Changes to this policy

We may update this Cookie Policy as we add or remove tools. When we make material changes, we will:

  1. Update the “Last updated” date above
  2. Increment the consent version, which will prompt you to make a new choice in the banner
  3. Notify you via email if you have an account with us and the change affects your existing data

08.Contact

Questions about this Cookie Policy or our use of tracking technologies:

US Precision Peptides
Email: info@usprecisionpeptides.com
Privacy Policy · Terms of Use

Back to top