Welmo Technology Cookie & Local Storage Notice
| Item | Content |
|---|---|
| Document Version | v1.0 |
| Publication Date | April 7, 2026 |
| Effective Date | April 14, 2026 |
| Last Updated | April 7, 2026 |
| Document ID | WELMO-LEGAL-08 |
| Applicable Entity | Henan Welmo Technology Co., Ltd. |
| Scope | Website only (*.welmotech.com); the WeChat Mini-Program "Welmo Perks" does not use cookies |
This English version is a courtesy translation. In case of any discrepancy between the Chinese and English versions, the Chinese version shall prevail.
Important Notice
This Cookie & Local Storage Notice (the "Notice") describes the technical details, purposes, and your choices regarding cookies and browser local storage used by Welmo Technology on its website. This Notice is one of the appendices to the Privacy Policy (Document 02).
1. Overview
1.1 Our Stance
On *.welmotech.com, Welmo Technology uses only essential session cookies to maintain your login state and does not use any third-party tracking, advertising, analytics, or behavioral profiling cookies.
1.2 Key Facts
| Item | Content |
|---|---|
| Total cookies | 4 (see Section 2 table) |
| Third-party cookies | None |
| Tracking cookies | None |
| Advertising cookies | None |
| Analytics cookies (GA / Mixpanel / Umeng, etc.) | None |
| Cross-site tracking | None |
| Browser local storage (localStorage / sessionStorage) | Not used |
| Web SQL / IndexedDB | Not used |
| WeChat Mini-Program | Does not use cookies; login state maintained via WeChat native Storage + JWT |
2. Cookies We Use
| Cookie Name | Domain | Path | Expiry | Secure | HttpOnly | SameSite | Purpose | Necessary? |
|---|---|---|---|---|---|---|---|---|
welmo_token | .welmotech.com | / | 7 days | ✓ (prod) | – | Lax | User login JWT; frontend uses this cookie to carry auth info to APIs | Yes |
welmo_user | .welmotech.com | / | 7 days | ✓ (prod) | – | Lax | JSON containing user ID, mobile, nickname; used by the frontend to display login status | Yes |
admin_token | .welmotech.com | / | 8 hours | ✓ (prod) | – | Lax | Admin panel user login JWT | Yes (admins only) |
admin_phone | .welmotech.com | / | 8 hours | ✓ (prod) | – | Lax | Admin panel session marker | Yes (admins only) |
2.1 Field Notes
- Domain
.welmotech.com: Allows the cookie to be shared across all subdomains (www.welmotech.com,spices.welmotech.com,thegreens.welmotech.com,pet.welmotech.com,admin.welmotech.com), enabling single sign-on across subdomains. - Path
/: The cookie is valid for all paths of the site. Secure: In production (HTTPS), cookies are transmitted only via encrypted HTTPS channels. In local development, this flag is omitted to facilitate debugging.SameSite=Lax: Prevents cross-site request forgery (CSRF). Requests originated from third-party sites do not automatically carry these cookies, but normal top-level navigation is unaffected.HttpOnly: These cookies currently do not have HttpOnly set, because the frontend JavaScript needs to readwelmo_userto display login state andwelmo_tokento inject into theAuthorizationheader for API requests. We recognize the XSS risk and mitigate via strict content security policies and code audits.
2.2 Consequences of Disabling
If you clear or reject the above cookies:
- You will be unable to maintain login state; you will have to log in again after refreshing;
- You will be unable to activate benefits, claim refills, view order history, or use other features that require login;
- The website's guest browsing features (homepage introduction, product showcase) are unaffected.
3. Cookies & Technologies We Do Not Use
For transparency, the Welmo Technology website does not use any of the following cookies or technologies:
3.1 Third-Party Analytics Cookies
- ❌ Google Analytics (
_ga,_gid,_gat) - ❌ Mixpanel (
mp_*) - ❌ Umeng+ (
cnzz_*,umeng_*) - ❌ Sensors Data (
sensorsdata_*) - ❌ Adobe Analytics (
s_cc,s_sq) - ❌ Baidu Statistics (
Hm_*)
3.2 Advertising Cookies
- ❌ Google Ads (
_gac_*,__gads) - ❌ Facebook Pixel (
_fbp,fr) - ❌ TikTok Pixel
- ❌ Tencent Ads / Youlianghui
3.3 Social Media Tracking Cookies
- ❌ Weibo share button cookies
- ❌ Facebook Connect cookies
- ❌ Twitter / X cookies
3.4 Browser Local Storage
- ❌
localStorage— Welmo Technology's website does not store any user data in localStorage; - ❌
sessionStorage— Not used; - ❌ IndexedDB — Not used;
- ❌ Web SQL — Not used.
3.5 Device Fingerprinting and Cross-Site Tracking
- ❌ Browser fingerprinting (Canvas / Audio / Font / WebGL fingerprinting)
- ❌ Third-party tracking pixels (1×1 transparent GIFs)
- ❌ ETag tracking
- ❌ Flash LSO (Local Shared Objects)
4. How to Manage Cookies
4.1 Browser Settings
You may view, delete, or reject cookies through your browser settings. The exact path varies by browser:
| Browser | Settings Path |
|---|---|
| Chrome | Settings → Privacy and Security → Cookies and Other Site Data |
| Safari | Preferences → Privacy → Manage Website Data |
| Firefox | Settings → Privacy & Security → Cookies and Site Data |
| Edge | Settings → Cookies and Site Permissions → Cookies and Site Data |
4.2 Logging Out
You may log out at any time via the "Log Out" button on the Welmo website; clicking it will immediately delete welmo_token and welmo_user from your browser.
4.3 Global Clear
If you wish to clear all cookies set by the Welmo website:
- Enter
https://www.welmotech.comin your browser address bar; - Click the "lock" icon in the address bar → "Cookies and Site Data";
- Select all Welmo-related cookies and delete them.
5. Special Notice for the WeChat Mini-Program "Welmo Perks"
5.1 No Cookies
The WeChat Mini-Program runtime does not have a browser cookie mechanism. "Welmo Perks" does not use any cookies.
5.2 Local Storage Used
The Mini-Program uses WeChat's native wx.setStorage / wx.getStorage APIs to store the following on your device:
| Storage Key | Content | Purpose | Expiry |
|---|---|---|---|
welmo_token | JWT | Maintain login state; injected to Header when calling APIs | 7 days |
welmo_user | JSON: {id, phone, nickname} | Read by frontend for login state info | 7 days |
5.3 How to Clear
You may:
- Clear via the Mini-Program "Profile → Log Out";
- Clear via WeChat "Settings → General → Storage → Cache";
- Delete the Mini-Program and re-add it.
5.4 Relationship with the Privacy Policy
The Mini-Program local storage serves the same purpose as the website cookies in Section 2 — solely to maintain login state. See Section 2.4 of the Privacy Policy (Document 02).
6. Contact Us
For any questions about this Notice, contact us via:
- Personal Information Protection Email: legal@welmotech.com
- Customer Service Phone: +86 158 3825 5257 (Daily except Wednesdays, 09:00–18:00 CST)
- Company Name: Henan Welmo Technology Co., Ltd.
Revision History
| Version | Date | Changes |
|---|---|---|
| v1.0 | April 7, 2026 | Initial release |
All rights of final interpretation reserved by Henan Welmo Technology Co., Ltd.
Document ID: WELMO-LEGAL-08 · Version v1.0 · April 7, 2026