Scope
This policy covers cookies, local storage, pixels, scripts, tags and similar technologies that store information on, or access information from, a user’s device. It should be read with the Privacy Policy.
Current use
The public site is designed without advertising cookies. Strictly necessary storage may be used to deliver a requested feature, maintain security, balance traffic, preserve a session or remember a privacy choice.
Optional analytics and preference storage remain off unless selected through the privacy control. Any additional technology must be added to the inventory before it is enabled.
Categories
Required to provide a service requested by the user or for core security and network functions. These cannot be switched off through a consent tool.
Remember non-essential choices. Used only where an applicable consent or exemption has been identified.
Measure use and performance. Non-exempt analytics will remain off until valid consent is obtained.
Advertising or cross-site profiling. Not currently intended for the public website and will not be activated without a separate decision and valid consent.
Consent and choice
Where consent is required, the technology will remain off until the user takes a clear affirmative action. Refusing must be as easy as accepting, and users must be able to change or withdraw their choice. Necessary storage is explained but does not depend on optional consent.
Managing device storage
The website privacy control, where available, records optional choices. Browser controls can also remove or block cookies and local or session storage. Removing an account-session cookie signs you out; removing a remembered-visitor cookie removes that device’s remembered recognition but does not erase the account.
The current privacy-choice record has no automatic expiry, as stated in the inventory. A materially different optional purpose or service requires a new, specific choice where consent is required; an old saved choice is not blanket permission for it. Browser deletion does not itself erase records held by USG or a provider. Privacy requests follow the Privacy Policy.
Technology inventory
The following application storage is provided by USG for the stated purposes. Optional analytics and advertising trackers are not enabled by this consent control. A new optional service requires an updated inventory and a fresh, specific choice before activation.
Secure account session. Normally 7 days; administrator sessions 12 hours. Necessary for requested account access.
Remembers a verified visitor to support return sign-in. Up to 180 days; it does not itself grant protected account access.
Records privacy choices and the date saved. Remains until cleared or replaced; no automatic expiry is currently applied.
A random retry key and content digest help prevent duplicate form submissions. Removed after a successful submission or when the browser ends the page session.
Managed hosting may also use necessary security or access-control storage. Browser controls can remove storage; removing session cookies signs you out. Device-storage lifetimes are separate from server record-retention periods.
Provider technology and return sign-in
The inventory distinguishes a secure account session from the longer-lived remembered-visitor record. The latter does not itself authorise protected access. Whether a technology qualifies as strictly necessary depends on its purpose and the feature requested, not merely on whether it is provided by USG. Non-essential recognition or tracking must meet the applicable consent or exemption conditions.
Hosting and security providers may set technology for traffic management, access protection or fraud prevention. Any deployment-specific technology must be checked for its actual name, provider, purpose and duration and added to the inventory where applicable. This policy does not assert that an unobserved provider cookie is deployed, or that all provider technology is exempt from consent.
Questions about device storage and a particular feature can be sent to privacy@universalsustainablegrowth.org. See Data Processing, Infrastructure & Service Providers for provider roles.
Questions about this document?
Email the relevant address shown in this policy. Please do not send identity documents or confidential case material by ordinary email.