Cookie Policy

Effective Date: August 15, 2026

Last Updated: August 15, 2026

Version: 2026-08-15

1. Introduction

This Cookie Policy explains how WPARTS LLC, a California limited liability company (“WPARTS”, “we”, “us”, or “our”), uses cookies and similar technologies on wparts.com, hosted seller sites, and related services (the “Services”). Read it together with the Privacy Notice, the EEA/UK Privacy Addendum, and the Do Not Sell or Share notice.

Controller: WPARTS LLC. Privacy questions: [email protected]. Legal: [email protected].

If a translation of this Policy conflicts with the English version, the English version controls. Nothing in this Policy limits non-waivable consumer, privacy, or other rights that apply to you under the law of your country or state of residence.

2. What Are Cookies and Similar Technologies?

Cookies are small text files stored on your device when you visit a website. Similar technologies include local storage, pixels, and other identifiers used to operate, secure, or measure the Services. Cookies may be session cookies (deleted when you close the browser) or persistent cookies (kept for a set period).

First-party cookies are set by WPARTS. Third-party cookies or scripts may be set by service providers we use, or by a Seller who configures analytics or advertising on a hosted site.

When you first visit the Services (and again if you reset preferences or we add a new non-essential category), we present a cookie banner with these choices:

Accept all - allow strictly necessary, functional, analytics, and advertising technologies described in this Policy.
Reject non-essential - allow only strictly necessary cookies and similar technologies required to operate the Services (including security and, where you use the feature, maps). Analytics and advertising technologies will not load.
Customize - choose categories (for example, analytics or advertising) and save those preferences.

You can change your choice at any time using Cookie Settings in the website footer. We store your preference in a strictly necessary consent cookie so we can honor it on later visits (typically for 12 months).

We honor a Global Privacy Control (GPC) signal as an opt-out of sale or sharing of personal information and as a rejection of non-essential advertising and analytics cookies. See the opt-out notice.

4. Categories

Strictly necessary - required to operate accounts, security, locale routing, consent storage, and core site functions. These cannot be switched off in our systems. Disabling them in your browser may break sign-in or forms.
Functional - remember choices such as language. Some locale storage is treated as necessary to show the site in the language you selected. Maps and address lookup load when you use those features.
Analytics - help measure how the Services are used. On seller-hosted sites, analytics tools a Seller enables load only after consent (or, for U.S. visitors, until you opt out or a GPC signal is present).
Advertising / targeting - used for cross-context advertising measurement. Advertising tools a Seller enables load only after consent (or, for U.S. visitors, until you opt out or a GPC signal is present).

We do not operate our own advertising network. We do not use payment-processor cookies, because we do not process card payments on the Platform.

5. Technologies We Use

Category	Purpose	Typical duration	Consent
Session and account	Keep you signed in, operate forms, and show signed-in state	Session to about 24 hours, depending on the function	Strictly necessary
Security and abuse prevention	Protect accounts, forms, and the Services	Session to about 30 days; related security logs up to 24 months	Strictly necessary
Language preference	Remember the language you selected or that was detected	Up to 1 year	Functional / necessary for language
Consent preference	Store Accept all / Reject non-essential / Customize choices	Typically 12 months	Strictly necessary
Maps and address lookup	Show a map or complete an address when you use that feature	Only while the feature is used, plus any duration set by the map provider	Functional (loads with the map)
Seller analytics	Measure use of a Seller’s hosted site. The Seller is the controller. We load the tool only after visitor consent (and not when GPC is present).	Per the Seller’s provider (often up to 24 months)	Analytics (consent)
Seller advertising	Advertising measurement on a Seller’s hosted site. The Seller is the controller. We load the tool only after visitor consent (and not when GPC is present).	Per the Seller’s provider	Advertising (consent)

Administrative tools used by WPARTS personnel may set additional strictly necessary cookies. They are not used for public advertising.

6. Security Technologies

We use cookies and similar technologies to protect accounts, prevent fraud and abuse, and keep the Services reliable. These technologies are not used for advertising unless you separately consent to advertising technologies. Clearing cookies or site data in your browser may require you to sign in again.

7. Third-Party Technologies

When a service provider’s technology runs (for example, maps you choose to use, security checks on forms, or analytics or advertising tools a Seller enables after consent), that provider may process device and usage data under its own terms. Categories of providers are listed on the Subprocessors page. A named list is available to Sellers under contract and to others on confidential request at [email protected].

We do not list payment processors because we do not process card payments on the Platform.

8. Legal Basis

EEA/UK: strictly necessary cookies are used as required to provide the service you request (ePrivacy) and, where personal data is processed, on contract or legitimate interests. Non-essential cookies and pixels require your consent. You may withdraw consent at any time via Cookie Settings without affecting the lawfulness of prior processing.
United States (including California): necessary and security technologies run to operate the Services. Analytics and advertising technologies that may be a “sale” or “sharing” under the CPRA are subject to opt-out via Cookie Settings, the footer link, the privacy request form, email, or GPC. We honor GPC.

We do not sell personal information for money. Loading analytics or advertising tools a Seller enables, or similar technologies, may be “sharing” or a “sale” under the CPRA when used for cross-context behavioral advertising. Opt out as described in Section 3 and the opt-out notice. An opt-out is honored for at least 12 months.

10. Browser Controls

You may block or delete cookies in your browser. Blocking strictly necessary cookies may prevent sign-in, forms, or language persistence. Industry opt-out tools (for example, the Digital Advertising Alliance and Network Advertising Initiative) may also limit some advertising cookies set by third parties.

11. Retention

Session cookies expire when the browser session ends or at the times in the table above. Persistent cookies last for the stated period unless you delete them. Security logs are retained up to 24 months. Consent and opt-out records are kept at least 12 months, typically up to 5 years, so we can demonstrate your choice.