1. What cookies and local storage are
A cookie is a small text file a website places in your browser to remember information between pages and visits. Local storage and session storage are similar browser mechanisms used to keep data on your device — for example, the contents of a shopping cart. Together we refer to these as "cookies" in this document, and they are subject to the same rules under Article 5(3) of the ePrivacy Directive and applicable US privacy laws including the CCPA.
Cookies are either first-party (set by chinabusinessbridge.com) or third-party (set by another domain loaded on our pages). They can be session cookies (deleted when you close the browser) or persistent cookies (kept for a defined duration).
2. How we classify cookies
We group cookies into four categories. Only the first category is strictly necessary and cannot be disabled without breaking the site. All other categories are loaded only after you give consent, and you can change your mind at any time.
2.1 Strictly necessary
These cookies are required for the website to work — for you to sign in, keep items in your cart, and submit forms safely. They cannot be switched off through the preferences panel, because the site would not function without them. They do not track you across sites and are not used for marketing.
| Name | Provider | Purpose | Duration | Party |
|---|---|---|---|---|
| cbb_session | chinabusinessbridge.com | Keeps you signed in to your account; holds the server-side session identifier. | 30 days | First |
| cbb_cart | chinabusinessbridge.com | Stores the items you have added to your cart so they persist across visits. | 30 days | First |
| cbb_csrf | chinabusinessbridge.com | Cross-site request forgery token for form submissions (security). | Session | First |
| cbb_consent | chinabusinessbridge.com | Remembers your cookie preferences so we do not ask again on every page. | 12 months | First |
| __cf_bm | Cloudflare | Bot mitigation on the content-delivery edge. | 30 minutes | Third |
2.2 Functional
These cookies remember choices you make to improve your experience, such as the language and the accessibility preferences you have selected. They are loaded only if you accept the "Functional" category in the preferences panel.
| Name | Provider | Purpose | Duration | Party |
|---|---|---|---|---|
| cbb_locale | chinabusinessbridge.com | Remembers your preferred language (EN / DE / FR / IT). | 12 months | First |
| cbb_ui | chinabusinessbridge.com | Stores UI preferences such as reduced motion, preferred currency, and dark-mode override. | 12 months | First |
| cbb_recent | chinabusinessbridge.com | Remembers recently viewed products for the "Continue browsing" list. | 90 days | First |
2.3 Analytics
We use Plausible Analytics, which we host ourselves on servers located in the European Union. Plausible is designed to be privacy-preserving: it does not set cross-site cookies, does not collect personally identifying information, and does not build long-term user profiles. The only identifier used is a rotating, daily-salted hash that is never shared with any third party. We treat analytics data as optional and load it only if you consent to the "Analytics" category.
| Name | Provider | Purpose | Duration | Party |
|---|---|---|---|---|
| _plausible_id | Plausible (self-hosted, EU) | Aggregated, anonymised measurement of pages and referrers. | 12 months | First (self-hosted) |
2.4 Marketing
Marketing cookies measure the effectiveness of our advertising on third-party platforms. They allow us to see, for example, whether someone who clicked our Google Ads listing went on to buy a Vault Pro — so we can decide whether to keep running that ad. They are set by third parties and can be blocked by your browser or by declining the "Marketing" category.
| Name | Provider | Purpose | Duration | Party |
|---|---|---|---|---|
| _gcl_au | Google Ads | Measures conversions attributable to Google Ads campaigns. | 90 days | Third |
| _fbp | Meta (Facebook/Instagram) | Stores and tracks visits for Meta Pixel conversion attribution. | 90 days | Third |
| _ttp | TikTok | TikTok Pixel — measures conversions from TikTok campaigns. | 13 months | Third |
| IDE | Google DoubleClick | Ad measurement and attribution on the Google Display Network (loaded only when a campaign is active). | 13 months | Third |
3. How to change your preferences
You can open the preferences panel at any time by using the button below or the "Cookie settings" link in our footer. Changes apply immediately and are remembered for 12 months in the cbb_consent cookie.
3.1 Blocking cookies in your browser
You can also refuse or delete cookies directly in your browser. The instructions below are kept current at the browser vendor's help site, which will always be more accurate than a copy here:
- Firefox — Preferences → Privacy & Security → Cookies and Site Data
- Chrome — Settings → Privacy and security → Cookies and other site data
- Safari — Settings → Privacy → Manage Website Data
- Edge — Settings → Cookies and site permissions
- Brave — Settings → Shields
Blocking strictly necessary cookies will prevent you from signing in, adding items to the cart, and completing checkout.
3.2 Do Not Track (DNT) and Global Privacy Control (GPC)
ChinaBridge honours the Global Privacy Control (GPC) signal. If your browser sends GPC, we treat it as a valid opt-out of all non-essential processing and will not load analytics or marketing cookies unless you subsequently give explicit in-page consent. We also treat the legacy Do Not Track (DNT: 1) header as an opt-out of analytics and marketing cookies.
4. Consent records
When you make a choice in the preferences panel, we record the timestamp, the categories accepted or rejected, the version of this Cookie Policy, and a hash of your chosen settings. These records are retained for 12 months to demonstrate compliance with Articles 7 and 30 GDPR and are deleted automatically thereafter. We do not link consent records to your account unless you are signed in.
5. Changes to this Cookie Policy
If we add, remove, or replace any cookie, we update the tables above and raise the "Last updated" date. Material changes — for example, adding a new marketing-category cookie — trigger a re-consent prompt the next time you visit, so that your preferences are captured against the new policy version.
6. Contact
If you have questions about this policy or about a specific cookie, write to [email protected]. Our full privacy notice is at /legal/privacy-policy.html.