Cookie Policy
Effective 2026-10-06
We use a small number of cookies to operate the Site. We do not use third-party advertising cookies or cross-site tracking pixels.
When the guest browsing limit is enabled, the strictly necessary __Host-browse-day cookie assigns a random, signed daily identity to enforce an allowance of 50 different product pages per day, resetting at midnight Beijing time (UTC+8). It contains no email, IP address or browsing list. Cloudflare stores the limited set of product identifiers for that identity until shortly after the day ends. This functional cookie operates independently of analytics consent and Do Not Track; it does not turn analytics back on.
To prevent bulk collection, signed-in browsing uses the random, signed __Host-browse-device browser cookie for 30 days. Each account and browser can open up to 30 new products in a rolling 10-minute window and 150 per Beijing calendar day; revisits that day do not count again. The server stores a hash of the browser identifier, linked account IDs and first/last observation times for up to 90 days after the last observation. Account deletion removes its links. This identifier is not a hardware fingerprint or proof that accounts belong to the same person. Clearing cookies or changing browsers can create a new identifier. It is used for access protection, not advertising or cross-site tracking, and does not enable analytics. Device associations begin with signed-in product browsing after this feature is enabled.
When network access protection is enabled, we use the connection IP address at the edge to derive a keyed hash and correlate short-window product access across accounts and browser identities. This protection stores hashes of the network, account, browser and product identifiers, access times, verification state and temporary restriction history in Cloudflare; it does not store raw IP addresses in that state. Short-window records are pruned during requests, and the remaining state is scheduled for deletion after 24 hours and 30 minutes without activity. Suspicious access may require Cloudflare Turnstile verification or temporarily restrict new product access. Cloudflare processes the verification token, connection IP and browser signals for this check. A shared IP does not prove that accounts belong to the same person. Verification does not reset browsing allowances. This security processing operates independently of analytics consent and does not enable analytics.
When the free QC preview is enabled, the strictly necessary qc_trial cookie assigns a random browser identity to unlock one inspection batch of full-size photos and videos. It lasts 30 days by default and does not reset daily. Our server retains the selected media references until this identity expires. The cookie contains no email, IP address or browsing history. It works independently of analytics consent and Do Not Track and never enables analytics. Clearing cookies or using another browser may create a new guest identity.
Categories
1. Strictly necessary (always on)
Required to provide core functionality (login, security). You cannot opt out of these without breaking the Site.
| Cookie | Purpose | Lifetime |
|---|---|---|
| cbs_session | Authentication session (HTTP-only, SameSite=Strict). | Session |
| cbs_csrf | Double-submit CSRF token paired with cbs_session. | Session |
| __Host-browse-day | Daily guest product allowance | Until midnight, Beijing time (UTC+8) |
| qc_trial | One-batch full-size QC preview | 30 days (default) |
| __Host-browse-device | Browser abuse protection | 30 days |
2. Analytics: first-party and optional Google Analytics
Our first-party analytics uses a random visitor identifier (cbs:vid, localStorage) and a 30-minute session identifier (cbs:sid) unless you turn Analytics off. These identifiers do not contain your name or email. If you turn it off, we delete these identifiers and use a salted daily hash for aggregate measurement. Do Not Track disables both our analytics and Google Analytics. Google Analytics 4 is optional and loads only after you explicitly accept the updated Analytics notice. Google receives limited page, referral, device and interaction data, including QC usage and outbound clicks, and processes network information to deliver the service. We do not send account identifiers, email addresses, parcel numbers or raw search/link input. Advertising personalization and Google Signals are disabled. The _ga and _ga_* cookies expire one year after their last update. You can withdraw consent in Cookie preferences; we stop collection and delete these cookies. Google processes data under its Privacy Policy.
3. Marketing
We currently use no marketing cookies. If we add a retargeting pixel in the future, it will be opt-in via a consent banner and listed here.
How to control cookies
- Most browsers allow you to block or delete cookies in their settings. Blocking strictly necessary cookies will log you out and break checkout flows.
- You can clear our cookies for this domain at any time via your browser's "Site settings" or DevTools > Application > Cookies.
Do Not Track
We honor the DNT signal: when it is set, our own analytics collects nothing and no third-party tracker is loaded.
Changes
Material changes will be posted on this page. The current cookie inventory is auditable in your browser DevTools.