1. Purpose
This Cookie Policy explains how HuoPuo, LLC uses cookies, browser storage, scripts, device identifiers, and similar technologies on HuoPuo websites and online materials.
It should be read together with the HuoPuo Privacy Notice, the EULA, the Data Processing Addendum where applicable, the Subprocessor List, the Payment Data Handling Statement, and other legal or privacy materials published by HuoPuo.
2. Scope
This Cookie Policy applies to HuoPuo public websites and online services that link to or reference it. It does not govern cookies or tracking technologies used by Customer-selected third-party services, Customer-controlled deployments, Customer-hosted environments, or third-party integrations independently enabled or controlled by a Customer.
3. What Cookies and Similar Technologies Are
Cookies are small text files placed on a device or browser. Similar technologies include pixels, tags, local storage, scripts, device identifiers, analytics identifiers, and other technologies that store or access information on a device or collect information about website interactions.
Some cookies are necessary for website operation, security, payment security, session continuity, or recording your cookie preferences. Others are used for analytics or advertising and are placed only where you have given consent, in accordance with applicable law.
4. Cookie Categories We Use
| Category | Status | Consent required |
|---|---|---|
| Essential and security | In use. Session management, authentication, CSRF protection, bot detection, and network security. | No — necessary for the website to function |
| Preference and consent | In use. Language selection and recording of your cookie choices. | No, where used solely for a preference you requested |
| Payment | Used when a visitor uses Stripe payment functionality, for payment security and fraud prevention. | No, where necessary for the payment service you requested |
| Analytics | In use. Google Analytics 4, to understand how the website is used. | Yes — placed only after consent |
| Advertising and marketing | In use. Google advertising products, for campaign measurement, conversion tracking, and remarketing. | Yes — placed only after consent |
| External chat widget | Not used. HuoPuo does not currently use a third-party chat-widget provider. | Not applicable |
5. Essential and Security Cookies
These cookies are necessary for the website to operate securely. They are set without consent because the website cannot provide the service you requested without them.
| Cookie | Provider | Purpose | Duration | Set before consent |
|---|---|---|---|---|
| sessionid | HuoPuo | Maintains user sessions, authentication state, and application session continuity. | 2 weeks | Yes |
| csrftoken | HuoPuo | Protects forms and authenticated operations against cross-site request forgery. | Approximately 1 year | Yes |
| __cf_bm | Cloudflare | Bot management. Distinguishes human visitors from automated traffic and helps protect the website from abuse. | Approximately 30 minutes | Yes |
| cf_clearance | Cloudflare | Records that a visitor has passed a security challenge, so the challenge is not repeated. | 30 minutes by default; configurable | Yes |
| _cfuvid | Cloudflare | Distinguishes visitors who share the same IP address so Cloudflare can apply rate limiting accurately. | Session | Yes |
Cloudflare provides network security and performance services for the HuoPuo public website. The cookies above are set by Cloudflare for security purposes and are not used for analytics, profiling, or advertising.
6. Preference and Consent Cookies
| Cookie | Provider | Purpose | Duration | Set before consent |
|---|---|---|---|---|
| django_language | HuoPuo | Remembers the interface or website language you selected. | Session | Yes, where used solely to remember a language you selected |
| huopuo_cookie_consent | HuoPuo | Records your cookie-consent selection so that HuoPuo can apply your choices on later visits. | 1 year | Yes, recorded when you make a cookie choice |
7. Payment Cookies
Where you use Stripe payment functionality, Stripe sets cookies required for payment security, authentication, and fraud prevention. Stripe may set additional cookies or use browser storage depending on which Stripe features are enabled, including Elements, Payment Element, Radar, and Link.
| Cookie | Provider | Purpose | Duration | Set before consent |
|---|---|---|---|---|
| __stripe_mid | Stripe | Payment fraud prevention and transaction risk assessment. | Approximately 1 year | Yes, where necessary for the payment functionality you requested |
| __stripe_sid | Stripe | Payment fraud prevention and transaction risk assessment. | Approximately 30 minutes | Yes, where necessary for the payment functionality you requested |
8. Analytics Cookies
HuoPuo uses Google Analytics 4 to understand how visitors use the website, which pages are viewed, and how the website performs. Analytics cookies are not necessary for the website to function. HuoPuo places them only after you have given consent — for every visitor, regardless of whether the law of your country requires consent.
Before consent is given, the Google Analytics tag is configured so that no analytics cookies are written and no analytics identifiers are stored.
| Cookie | Provider | Purpose | Duration | Set before consent |
|---|---|---|---|---|
| _ga | Distinguishes individual visitors so that visits can be counted accurately. | 2 years by default; browsers may shorten this | No | |
| _ga_* | Stores session state for the relevant Google Analytics property. | 2 years by default; browsers may shorten this | No | |
| _gid | Distinguishes visitors over a short period, where set by the current tag configuration. | 24 hours | No |
Stated durations are Google defaults. Browsers apply their own limits that may shorten them in practice — for example, some browsers cap first-party cookies at around 400 days, and others at a few days where a visitor does not return.
HuoPuo's Google Analytics user-level and event-level data-retention setting is 2 months.
9. Advertising and Marketing Cookies
HuoPuo uses Google advertising products for campaign measurement, conversion tracking, and remarketing. These cookies allow HuoPuo to measure the effectiveness of its advertising and, where you consent to personalization, to show you relevant advertising on other websites.
Advertising cookies are never necessary for the website to function. They are placed only after you have given consent. Some of these cookies are set by Google on its own domains, including google.com and doubleclick.net, rather than on huopuo.com.
| Cookie | Provider / domain | Purpose | Duration | Set before consent |
|---|---|---|---|---|
| _gcl_au | Google (first-party, huopuo.com) | Stores advertising click information to support conversion measurement. | 90 days | No |
| _gcl_aw, _gcl_dc | Google (first-party, huopuo.com) | Store ad-click identifiers used for conversion attribution, where set. | 90 days | No |
| IDE | Google (doubleclick.net) | Ad delivery, personalization, and measurement. | 13 months in the EEA and UK | No |
| test_cookie | Google (doubleclick.net) | Checks whether the browser supports cookies. | Approximately 15 minutes | No |
| NID | Google (google.com) | Stores preferences and supports personalized advertising in Google services. | 6 months | No |
The exact set of advertising cookies depends on which Google advertising products and features are active at the time of your visit. Where a cookie in this table is not set by the current configuration, it is not placed on your device.
10. Your Cookie Choices
When you first visit the HuoPuo website, a cookie banner allows you to accept all cookies, reject all non-essential cookies, or manage your preferences by category. Essential, security, preference, and payment cookies operate as described above. Analytics and advertising cookies are placed only if you accept them.
HuoPuo uses Google Consent Mode. Until you give consent, the advertising and analytics consent signals — ad_storage, ad_user_data, ad_personalization, and analytics_storage — are set to denied, and Google tags do not read or write advertising or analytics cookies.
Visitors in the United Kingdom. HuoPuo does not currently target the United Kingdom and does not operate analytics or advertising technologies for visitors located there. No analytics or advertising cookies are placed on those visitors. Only essential, security, preference, and payment cookies operate.
Rejecting non-essential cookies does not affect your ability to use the website, request information, or complete a payment.
11. Changing or Withdrawing Your Consent
You may change or withdraw your cookie consent at any time, and withdrawing consent is as straightforward as giving it.
To change your choices, use the cookie preferences link available in the website footer. Your updated choices take effect immediately for cookies set after that point.
Withdrawing consent does not remove cookies already stored on your device. To remove those, use your browser controls as described in the next section.
12. Browser Controls
Most browsers allow you to view, block, and delete cookies through their settings. Blocking all cookies, including essential cookies, may prevent parts of the website from working correctly. Instructions differ by browser and are available in the help materials published by your browser provider.
13. International Transfers
Google and Cloudflare are providers with international operations, and information collected through their cookies may be processed outside your country, including in the United States.
Where applicable data-protection law restricts cross-border transfers of personal data, HuoPuo relies on an appropriate lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses, or another valid mechanism, as described in the HuoPuo Privacy Notice.
14. Third-Party Terms
Google, Cloudflare, Stripe, and other service providers process information under their own terms, privacy policies, data-processing terms, and security materials. Their handling of information collected through their own cookies is governed by those terms.
HuoPuo is not responsible for third-party services independently selected, enabled, or controlled by a Customer or by a website visitor outside HuoPuo's control.
15. Changes to This Policy
HuoPuo updates this Cookie Policy when the cookies used on its websites change, when new technologies are introduced, or when legal requirements change. Where a new category of non-essential cookies is introduced, this Cookie Policy and the cookie banner are updated before those cookies are activated.
Updated cookie materials are made available through the HuoPuo website, legal materials, customer portal, or another location designated by HuoPuo. The version and version date are shown at the beginning of this document.
16. Contact
▪Website: https://www.huopuo.com
▪General Contact: info@huopuo.com
▪Security Contact: security@huopuo.com
▪Legal / Privacy Contact: legal@huopuo.com