Cookie Policy
Last updated: 30 August 2026
This Cookie Policy explains how ITEMVENDOR uses cookies and similar technologies on https://itemvendor.com.
The controller responsible for these technologies is identified in Section 1 of our Privacy Policy. Where a cookie or similar technology processes personal data, that processing is also described in our Privacy Policy.
1. What cookies are
Cookies are small files stored on your device when you visit a website.
Similar technologies may include local storage and comparable browser mechanisms. In this Policy, we refer to these technologies collectively as "cookies".
2. Consent rule
Strictly necessary technologies may operate without optional consent where legally permitted because they are required for security, authentication, checkout, session management or other essential Website functionality.
Preference, analytics and advertising technologies remain blocked until the Customer gives valid consent, unless a particular technology may lawfully operate without consent.
Rejecting non-essential technologies must be as easy as accepting them.
You may change or withdraw your choice at any time through Cookie Settings. Withdrawing consent does not affect processing that lawfully occurred before the withdrawal.
The Website may store your consent choice so that it does not need to ask for the same preference on every visit.
3. Cookie categories
| Category | Purpose | Consent requirement |
| Strictly necessary | Security, authentication, sessions, cart, checkout, fraud prevention and storage of consent choices. | Active where necessary |
| Preference | Language, region and optional interface preferences. | Consent unless legally exempt |
| Analytics | Audience measurement, Website usage statistics and performance analysis. | Consent unless legally exempt |
| Advertising | Marketing measurement, profiling and targeted advertising. | Blocked before consent |
ITEMVENDOR does not currently use optional preference, analytics or advertising cookies for tracking or targeted advertising.
If such technologies are introduced, this Policy and the Website's consent mechanism will be updated as necessary before they are used.
4. Technologies currently used
| Name / Provider | Category | Purpose | Duration | Recipient / Location |
| cf_clearance / Cloudflare | Strictly necessary | Stores evidence that a visitor successfully passed applicable Cloudflare security or challenge verification and helps prevent repeated security challenges. | Depends on the applicable Cloudflare security configuration | Cloudflare and its service locations |
| __cf_bm / Cloudflare | Strictly necessary | Supports Cloudflare bot-management and security functions by helping distinguish legitimate visitors from automated traffic where this Cloudflare functionality is enabled. | 30 minutes after continuous inactivity | Cloudflare and its service locations |
| csrftoken / ITEMVENDOR (Django) | Strictly necessary | Protects Website forms and requests against Cross-Site Request Forgery (CSRF) attacks. | 1 year | ITEMVENDOR infrastructure |
| sessionid / ITEMVENDOR (Django) | Strictly necessary | Maintains the Customer's authenticated session and essential Account functionality. | 5 days | ITEMVENDOR infrastructure |
| cookie_consent / ITEMVENDOR | Strictly necessary | Stores the Customer's cookie and consent preferences so that the Website can remember the selected choice. | 12 months | ITEMVENDOR infrastructure |
Cloudflare may introduce additional strictly necessary security cookies depending on the security functionality triggered for a particular visitor, such as challenge, rate-limiting or bot-protection technologies. Such technologies are used for Website security rather than advertising purposes.
Cloudflare confirms that cf_clearance supports its challenge and verification systems and that __cf_bm supports its bot-management functionality. (Cloudflare Docs)
5. Consent records
ITEMVENDOR may record information necessary to demonstrate and honour the Customer's cookie choice, including:
- consent status;
- the time of the choice;
- the applicable policy or consent configuration version;
- a technical identifier associated with the consent record.
These records may be retained for the period reasonably necessary to demonstrate the Customer's choice and comply with applicable legal requirements.
The cookie used to remember the Website's consent preference is currently configured for 12 months.
6. Third-party technologies
Certain strictly necessary technologies are provided by third-party service providers used to operate, secure or protect the Website.
Those providers may process technical information under their own privacy documentation and under the contractual arrangements applicable between ITEMVENDOR and the provider.
ITEMVENDOR does not permit third-party advertising or analytics technologies to operate before the consent required for those technologies has been obtained.
7. International data transfers
Cloudflare is a global service provider headquartered in the United States and may process information in the United States, the European Economic Area and other locations in which Cloudflare or its service providers operate.
Where personal data originating from the EEA is transferred internationally, appropriate safeguards are applied as required by applicable data-protection law.
Cloudflare states that transfers from the EEA to the United States may rely on its certification under the EU-U.S. Data Privacy Framework and that Standard Contractual Clauses and supplementary safeguards may also apply where required. (cloudflare.com)
Further information concerning ITEMVENDOR's international data transfers and service providers is available in our Privacy Policy.
8. Browser controls
Most browsers allow you to delete, restrict or block cookies through browser settings.
Deleting cookies may remove stored Website preferences and may cause the cookie consent interface to appear again.
Blocking strictly necessary cookies may prevent parts of the Website from operating correctly, including Account, security, cart or checkout functionality.
Browser controls do not replace the Website's consent mechanism for optional technologies.
To change your Website consent choice, use Cookie Settings.
9. Changes to this Policy
ITEMVENDOR may update this Cookie Policy if:
- new technologies are introduced;
- existing technologies change;
- service providers change;
- the Website's functionality changes;
- legal or regulatory requirements change.
The current version of this Policy displays its latest update date above.
Where a change requires a new consent choice, the Website will request that choice as required by applicable law.
10. Contact
Questions concerning this Cookie Policy or the Website's use of cookies may be sent to:
ITEMVENDOR
Email: [email protected]
Website: https://itemvendor.com