Cookie Policy

This Cookie Policy explains how usafireworks.com uses cookies and similar browser-storage technologies.

In short: the Site sets exactly one first-party cookie, and only when you sign in. It is strictly necessary to keep you signed in, and it is not used for advertising, marketing, or analytics. We set no third-party cookies. For a few display and convenience settings, the Site uses your browser's local storage and session storage instead of cookies.

The only cookie the Site sets is a session cookie named ufw_session. It is created when you sign in and it keeps you signed in as you move from page to page. It contains a signed session identifier, not your password, and it cannot be read by scripts running on the page (HttpOnly) or sent anywhere other than this Site (SameSite=Lax). It is transmitted only over an encrypted HTTPS connection (Secure). It expires after 30 days, or sooner if you sign out, and it is renewed each time you use the Site. Changing or resetting your password invalidates it immediately.

This cookie is strictly necessary: without it, the Site could not keep you signed in, and no account feature would work. It is a first-party cookie — set by usafireworks.com, not by any other company.

Alongside that one cookie, the Site uses your browser's local storage and session storage for a few convenience features. These are built into your browser: unlike a cookie, the data they hold is never sent automatically with your requests to a website — it stays in your browser until it is cleared. Local storage persists after you close the browser; session storage is cleared when you close the tab or browser. None of these items is used for advertising or for tracking you across other websites.

• Sign-in session — the ufw_session cookie described in Section 2. It keeps you signed in for up to 30 days, and it is removed when you sign out or change your password.
• Language preference — remembers whether you chose English or Spanish. Stored in local storage.
• Chat history — if you use the chat assistant while signed in, your conversation is kept on your device so you can see it again. Stored in local storage.
• Cached display name — remembers the account name shown in the chat widget. Stored in local storage.
• Session referral source — for the duration of a single browsing session, remembers how you arrived at the Site (for example, from a search engine) so that page-view statistics are attributed correctly. Stored in session storage and cleared when the session ends.

We record basic, aggregate page-view statistics: the page path, a traffic-source category, the referring URL, a device class, a country, and a timestamp. This is not cookie-based tracking and it is not stored on your device. We do not store your IP address; your IP address is sent to a geolocation service only to determine a general country, and only the country name is retained.

We do not use advertising, marketing, or analytics cookies, and we do not set advertising pixels or allow third parties to track you across other websites. The third-party services described in our Privacy Policy (our AI provider, email delivery, and geolocation) operate on our servers and do not depend on cookies set in your browser.

You can clear this stored data at any time through your browser's settings, and you can sign out at any time using the sign-out control on the Site. Signing out removes the session cookie. Clearing all site data will also remove your saved language preference and local chat history; it will not delete your account or your order records, which are stored on our servers.

Because we do not sell personal information and do not use cross-context behavioral advertising, there is no opt-out mechanism required for those practices. We do not treat browser Do Not Track signals in any special way, as we do not track users across sites.

Laws that require a cookie consent banner — including the EU ePrivacy Directive and the GDPR, and comparable U.S. state laws — require consent for storing or reading information on your device only where that storage is not strictly necessary to provide a service you have requested. The only cookie the Site sets is the session cookie described in Section 2, which is strictly necessary to keep you signed in and is not used for advertising or analytics, and the remaining items in Section 3 are stored locally to provide the convenience features you request. No consent banner or prior opt-in is therefore required for the way this Site operates.

The storage described in Section 3 is necessary for the functionality you request: keeping you signed in, remembering your language choice, and preserving your chat conversation. Where we process personal information on our servers, we do so on the basis of performing our contract with you, our legitimate interest in operating and securing the Site, and compliance with our legal obligations.

If we later introduce cookies or similar technologies that are not strictly necessary, we will update this Policy and, where required, ask for your consent before those technologies are used.

We may update this Policy from time to time. When we do, we will revise the date shown at the top of this page.

Questions about this Policy may be sent to CHINA SKYSONG FIREWORKS CO.,LTD at info@usafireworks.com.