Cookie notice

What we use

CORETRUST TECHNOLOGIES (PTY) LTD uses cookies and similar storage on the VendorTrust website to operate the Service. We do not currently use advertising or retargeting pixels. If that changes, we will update this notice and, where POPIA requires consent, ask for it.

• Essential session cookie — name vt_session (local) or __Host-vt_session (production). HttpOnly, SameSite=Lax, Secure in production. Stores your signed-in session. Max-age 90 days (renewed while you keep using VendorTrust on that device). Required to stay logged in.
• NextAuth / OAuth cookies — set if you sign in with Google, Facebook, or Apple, so the OAuth handshake can complete. Essential for that sign-in method.
• Local and session storage — signed-in profile cache, cart, listing drafts, last-used sign-in method. Not used to store payment card numbers.
• Vercel Analytics — first-party / privacy-oriented page-view analytics. Not used to build an advertising profile.
• Sentry — error monitoring. If enabled, a small sample of sessions (and all error sessions) may be recorded as session replay with text masked and media blocked. Used to fix bugs, not for ads.

Mobile app

The app does not set website cookies. It stores a session token in the operating system's secure storage, and a push token if you enable notifications.

Your choices

You can block cookies in your browser. Blocking the session cookie means you cannot stay signed in. Blocking Sentry or analytics may be possible via browser settings or extensions; we do not currently offer a separate in-app analytics toggle. Privacy rights: Privacy Policy. Questions: info@coretrust.tech.