00 Legal Disclaimer
NOTICE: This website's vaping products are verified by third-party testing as zero-nicotine and free of tobacco-derived ingredients. This site is nonetheless intended exclusively for adult users aged 21 and older residing in the United States, in compliance with the federal PACT Act (which covers zero-nicotine vaping devices) and applicable state-level vapor product regulations. This notice will be updated if test results change.
01 What Are Cookies
Cookies are small text files stored on your device (computer, tablet, mobile) when you visit windbar.ai. We also utilize matching tracking technologies including pixel tags, web beacons, and local storage; all references to "cookies" in this policy include these equivalent tracking tools.
Cookies enable core website navigation, form submissions, save your browsing preferences, and analyze anonymous visitor behavior. These tools do not automatically collect personally identifiable information unless you voluntarily submit data via contact forms, account sign-ups, or quote requests. Data collected via cookies cannot be linked to external third-party databases without your explicit opt-in consent.
U.S. Compliance Note: This policy aligns with the California Consumer Privacy Act (CCPA), Virginia CDPA, Colorado CPA, and other U.S. state consumer data protection laws, alongside FDA tobacco marketing and data collection rules for vapor products.
02 How Windbar Uses Cookies
We deploy cookies for four core, strictly non-targeted advertising purposes, consistent with U.S. vape advertising restrictions that ban behavioral ad profiling for vapor products (which apply regardless of nicotine content under the PACT Act's ENDS definition):
Important Industry Restriction: Windbar does not use cookies for targeted advertising, behavioral user profiling, or sell any visitor data to third-party ad networks. All cookie usage is limited to functional site operation and anonymous performance analytics. This aligns with U.S. federal and state bans on targeted vapor product marketing to consumers. That restriction applies regardless of nicotine content under the PACT Act's ENDS definition. The Company's products are verified by third-party testing as zero-nicotine.
- Operational Necessity: Ensure the site loads securely, maintains page navigation, restricts minor access, and grants entry to protected quote/wholesale B2B portal areas required for our vape wholesale business.
- Performance & Site Analytics: Aggregate anonymous visitor data to identify popular product pages, page load performance, bounce rates, and traffic sources to optimize our e-cigarette product catalog and wholesale ordering experience.
- Preference Storage: Save your site settings including language, unit measurement, recently viewed vape hardware/disposable pod products, and saved quote drafts so you do not re-input data on repeat visits.
- Customer Communication Tools: Power live chat, wholesale inquiry forms, dealer application submissions, and B2B client support features central to our U.S. vape supplier services.
03 Essential Cookies
Essential cookies are strictly required for the website to operate and cannot be fully disabled without breaking core site functionality. These cookies activate automatically in response to your actions (filling forms, setting privacy preferences, age verification) and have no opt-out toggle for U.S. visitors. Without these cookies, you cannot complete wholesale quote requests, age verification checks, or navigate between product pages.
| Cookie | Purpose | Duration |
|---|---|---|
| session_id | Maintains active browsing session state; enables form submissions, age verification retention | Session |
| csrf_token | Anti-CSRF security token for dealer forms and account sign-ups | Session |
| cookie_consent / windbar_cookies_accepted | Store user cookie preference to avoid repeated consent pop-ups | 12 Months |
| us_age_verify / windbar_age_verified | Mandatory 21+ age verification storage per the federal PACT Act (covers vaping devices regardless of nicotine content) | 90 Days / local persistence |
| __cf_bm | Cloudflare bot management to block malicious scraping traffic | 30 Minutes |
04 Analytics Cookies
Analytics cookies collect fully anonymized, aggregated data about how U.S. visitors interact with windbar.ai. All user identifiers are stripped of personal data, and these cookies are entirely optional—they will only activate if you manually opt in via our cookie preference banner. Aggregated analytics help us fix broken page flows, optimize disposable vape product page load speeds, and refine our wholesale dealer application process.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Anonymous visitor ID for U.S. aggregate traffic reporting | 2 Years |
| _ga_* | Track page views within a single browsing session | 2 Years |
| _gid | 24-hour visitor differentiation for state traffic breakdown | 24 Hours |
| _gat | Throttle analytics data collection on high-traffic pages | 1 Minute |
05 Functional Cookies
Functional cookies enable personalized site features for U.S. wholesale vape dealers and retail visitors. These cookies may be set by Windbar or approved third-party business platforms integrated into our website. Disabling functional cookies will break personalized site tools like recently viewed products and saved wholesale inquiries.
| Cookie | Purpose | Duration |
|---|---|---|
| lang_pref | Save regional language setting for U.S. localized content | 12 Months |
| recent_products | Store browsing history of vape hardware and disposable products | 30 Days |
| hubspotutk | Anonymous visitor tracking for wholesale inquiry management | 13 Months |
| __hstc | Core CRM tracking for dealer page visit records | 13 Months |
| __hssc | Session counter for repeat U.S. dealer visits | 30 Minutes |
06 Third-Party Cookies
Some cookies on windbar.ai are placed by external business service platforms embedded within our site. Windbar does not have full control over these third-party tracking tools, and their data processing is governed by their independent privacy policies. The third-party services we use for U.S. vape wholesale operations are limited to:
Google Analytics: Web analytics service for anonymous aggregate U.S. traffic data. Policy: https://policies.google.com/privacy
Cloudflare: CDN & cybersecurity platform for traffic optimization and bot protection. Policy: https://www.cloudflare.com/privacypolicy/
HubSpot: B2B CRM for wholesale dealer inquiry and client management. Policy: https://legal.hubspot.com/privacy-policy
Regulatory Note: All third-party partners are contractually prohibited from using cookie-derived data to run targeted vapor product advertising (a restriction that applies regardless of nicotine content under the PACT Act's ENDS definition), per U.S. vape marketing regulations.
07 Managing Your Cookie Preferences
All visitors accessing from the U.S. will view a cookie consent banner after completing 21+ age verification, complying with CCPA, CDPA and state privacy laws. You may update preferences anytime via the "Cookie Settings" link in the website footer. Essential cookies are enabled by default; non-essential cookies require explicit opt-in.
- Consent options: 1. Accept All;
- 2. Reject Non-Essential;
- 3. Customize toggle for analytics/functional cookies.
CCPA Data Sale Opt-Out: Windbar never sells any visitor data collected via cookies. No personal identifiable data is shared for commercial purposes.
08 Browser-Level Cookie Controls
All mainstream browsers used in the U.S. support native cookie management: block all/third-party cookies, auto-delete cookies on exit, prompt before storage, and delete individual cookies. Browser path guidance:
Chrome: Settings → Privacy & Security → Cookies and Other Site Data
Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari: Settings → Privacy → Manage Website Data
Edge: Settings → Privacy, Search, and Services → Cookies
Critical Warning: Blocking all cookies will disable mandatory age verification, wholesale forms and core site navigation.
09 Cookie Duration Definitions
Session Cookies: Temporary files erased automatically when you close the browser, used for real-time session management, age verification status and cross-page navigation.
Persistent Cookies: Long-term files stored on your device until expiration or manual deletion, used to save permanent preferences, consent records and anonymous analytics identifiers.
10 Changes to This Policy
Windbar reserves the right to revise this Cookie Policy to comply with updated U.S. federal/state tobacco regulations, FDA requirements, website function adjustments or data compliance updates. The "Last Updated" date will be revised upon release. Material changes affecting user privacy rights will trigger a re-consent pop-up. Continued site use after updates constitutes acceptance of the revised policy.
11 Related Legal Documents
This Cookie Policy shall be interpreted together with the following U.S.-compliant legal documents: Privacy Policy (personal data protection rules under U.S. laws); Terms of Service (website access and wholesale transaction rules); Age Verification Policy (mandatory 21+ identity screening rules).
In case of clause conflict, the Privacy Policy shall prevail.
12 Contact Information
Company: WINDBAR
U.S. Headquarters: Contact Windbar for our registered business address.
Privacy Inquiry Email: [email protected]
Privacy Request Form URL: https://windbar.ai/contact?purpose=privacy-request
Inquiry Subject Suggestion: US Cookie Policy Privacy Request
Website Footer Compliance Text: Windbar complies with all United States federal and state vapor product, data privacy, and age verification laws. Our products are verified by third-party testing as zero-nicotine and free of tobacco-derived ingredients. Website access is nonetheless restricted to persons 21 years of age or older within the United States, per the federal PACT Act.