Cookie Policy
Last updated · May 1, 2026
This Cookie Policy explains how US Precision Peptides (“USPP,” “we,” “us”) uses cookies, similar tracking technologies, and a session-recording tool on usprecisionpeptides.com (the “Site”). It supplements our Privacy Policy.
By using the Site, you agree to the use of cookies and tracking technologies as described below, subject to the choices you make in our consent banner.
01.What are cookies and similar technologies?
A cookie is a small text file that a website stores on your browser. Cookies allow a site to recognize your browser across pages and sessions, remember preferences, and collect analytics about how the Site is used.
We also use technologies that are not cookies but serve similar purposes for the purposes of this policy:
- Local storage — data stored in your browser's local storage (used to record your consent choice).
- Session recording — a tool (Microsoft Clarity) that captures how you interact with the Site: mouse movement, clicks, scrolling, and timing of form-field interactions.
- Web beacons / pixels — small graphics embedded in pages or emails that signal a page or message has been loaded.
02.Categories of cookies and tracking we use
We group cookies and tracking into two categories. You can accept or reject each category independently using the Cookie Preferences link in the footer or by clicking the cookie icon at any time.
2.1 Strictly necessary (always on)
These are required for the Site to function. They do not require your consent under GDPR Article 5(3) or under CCPA, because they are necessary to deliver a service you have explicitly requested (such as adding a product to your cart or completing checkout).
| Cookie / Storage | Purpose | Duration |
|---|---|---|
uspp-cart |
Stores cart contents during a session | Session |
uspp-age-verified |
Records that you have confirmed you are 21 or older | 30 days |
connect.sid |
Express server session identifier | Session |
uspp_consent_mode |
Records detected jurisdiction (gdpr / ccpa / none) so the consent banner shows the correct variant. Set server-side from the visitor's IP region. | 1 day |
uspp_gpc |
Records that your browser sent the Global Privacy Control signal. Causes analytics to remain off and the banner to be suppressed. | 1 day (only set if GPC was sent) |
uspp_consent_v2 (localStorage) |
Records your cookie-consent choice | 12 months |
uspp_aff_ref |
First-touch affiliate revenue-share attribution. Captures the ?ref= value from the URL the first time you arrive at the Site (later ?ref= values do not overwrite it). Cleared at account registration when the value is recorded to your account record. HttpOnly; SameSite=Lax; Secure in production. |
30 days, or until account registration completes — whichever comes first |
uspp_account_csrf |
Cross-site-request-forgery token paired with the form fields on the account-access pages (register, sign-in, forgot, reset). SameSite=Lax. |
1 hour, or until consumed |
You cannot disable strictly necessary cookies without breaking core Site functionality (cart, checkout, age gate).
2.2 Analytics and session recording (consent required)
These are off by default and only load after you accept them in the consent banner. They help us understand how researchers use the Site, identify usability problems, and improve the experience. They are not used for advertising and we do not share or sell this data.
Microsoft Clarity (session recording, heatmaps)
Clarity records your session — including mouse movement, clicks, scroll depth, and the timing of form-field interactions — to generate heatmaps and watchable session replays. Form input values are masked by default; we do not record passwords, payment-card numbers, or sensitive personal information. Recording quality is reduced over time and recordings are retained for 13 months.
| Cookie | Purpose | Duration |
|---|---|---|
_clck |
Persistent user identifier for Clarity | 1 year |
_clsk |
Connects multiple page views into a single session recording | 1 day |
CLID |
First-party Clarity session linker | 1 year |
MUID |
Microsoft user identifier (synchronized with Bing) | 1 year |
ANONCHK |
Indicates the MUID has been transferred to ANID for advertising synchronization (we do not opt into this) | 10 minutes |
SM |
Used by Clarity to sync the MUID across Microsoft domains | Session |
Provider: Microsoft Corporation. Data may be transferred to and processed in the United States. See Microsoft's privacy statement.
Google Analytics 4
GA4 collects aggregate, pseudonymous information about pages visited, time on site, device type, and traffic source. We have IP anonymization enabled and have disabled Google Signals, ads personalization, and remarketing features.
| Cookie | Purpose | Duration |
|---|---|---|
_ga |
Distinguishes unique users | 2 years |
_ga_<measurement-id> |
Persists session state for GA4 | 2 years |
Data retention: 14 months. Provider: Google LLC. See Google's privacy policy and how Google uses data.
Umami
Umami is a privacy-respecting, cookieless analytics tool that records page views and aggregate referrer / location / device data. It does not set cookies, does not use fingerprinting, and does not collect personal data. It is grouped under “Analytics” for unified user choice; if you reject analytics, we will not load Umami either.
Provider: self-hosted by USPP. No third-party data transfer.
03.How to manage your preferences
You can change your choices at any time by:
- Clicking Cookie Preferences in the Site footer.
- Clearing your browser's cookies and local storage, which will cause the consent banner to reappear on your next visit.
- Using your browser's privacy settings to block cookies globally — note that this may break parts of the Site that rely on strictly necessary cookies (e.g., cart, checkout).
Browser-level controls
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions → Cookies and site data
Global Privacy Control (GPC)
We honor the Global Privacy Control signal. If your browser sends a GPC signal — either via the Sec-GPC: 1 request header or via navigator.globalPrivacyControl — we treat it as a CCPA opt-out request and will not load analytics or session recording, regardless of your jurisdiction. The consent banner will not appear. You can override this from the Cookie Preferences link in the footer if you want to opt back in.
Do Not Track (DNT)
We do not currently respond to DNT browser signals, because DNT lacks a clear standard. We honor GPC instead, which provides the equivalent right.
04.How we decide which banner to show
We detect your jurisdiction from your IP address (country and US state, where applicable) at the time of your request. Based on that detection, the Site does one of three things:
- European Economic Area, United Kingdom, or Switzerland — we show a full opt-in consent banner. No analytics or session recording loads until you accept.
- California or another US state with a comprehensive privacy law (Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana) — we show a small opt-out notice. Analytics may load by default; you can opt out at any time.
- Anywhere else — no banner is shown. Analytics load by default. The Cookie Preferences link in the footer always works regardless of jurisdiction, so you can opt out from there.
If we cannot detect your location, we default to the strictest treatment (full opt-in banner).
05.Your rights
European Economic Area, United Kingdom, Switzerland (GDPR / UK GDPR)
You have the right to:
- Withdraw consent for non-essential cookies at any time (using the methods above)
- Request access to, correction of, or deletion of your personal data
- Object to processing or request restriction of processing
- Data portability
- Lodge a complaint with your local supervisory authority
To exercise any of these rights, contact info@usprecisionpeptides.com.
California (CCPA / CPRA)
California residents have the right to:
- Know what personal information is collected about them
- Request deletion of personal information
- Opt out of the sale or sharing of personal information
- Limit the use of sensitive personal information
- Non-discrimination for exercising these rights
We do not sell your personal information. Rejecting analytics in the consent banner also exercises your CCPA right to opt out of “sharing” for cross-context behavioral advertising.
To exercise these rights, contact info@usprecisionpeptides.com or use the form linked in our Privacy Policy.
Other jurisdictions
If you are subject to a privacy law not listed here (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, etc.), you may have similar rights. Contact us using the address above.
06.Third-party links and embedded content
Pages on this Site may link to third-party services (Microsoft Clarity, Google, payment processors, etc.). When you visit those services, their own cookie policies apply. We are not responsible for the privacy practices of third parties.
07.Changes to this policy
We may update this Cookie Policy as we add or remove tools. When we make material changes, we will:
- Update the “Last updated” date above
- Increment the consent version, which will prompt you to make a new choice in the banner
- Notify you via email if you have an account with us and the change affects your existing data
08.Contact
Questions about this Cookie Policy or our use of tracking technologies:
US Precision Peptides
Email: info@usprecisionpeptides.com
Privacy Policy · Terms of Use