IziMarket Cookie Policy

This Cookie Policy (the “Policy”) describes which cookies and similar technologies are used on the izi.market website and its subdomains (the “Platform”), for what purpose, how long they are stored and how the User can manage them.

The Platform is operated by Fitvana Limited, a private limited company registered under the laws of Hong Kong (Business Registration Number 79698379), registered office address: 18 Harbour Road, 35/F, Central Plaza, Wanchai, Hong Kong Island, Hong Kong (the “Operator”).

The Policy forms part of the General Rules of the IziMarket Platform (the “Rules”) by virtue of clause 1.1 of the Rules and supplements the IziMarket Privacy Policy (the “Privacy Policy”). Terms are used in the meaning given to them in the Rules and the Privacy Policy. With respect to cookies and similar technologies, the Policy prevails over the Privacy Policy.

Data collected using cookies may constitute personal data. With respect to Users located in the Russian Federation, the Operator processes such data in accordance with Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006 (“152-FZ”).

Advertising cookies are set only with the User's separate consent (clause 3.4). The Operator does not sell data obtained using cookies.

Cookie: a small data file that a website stores in the User's browser and receives back on subsequent requests. With it, the website “recognizes” the browser: it remembers that the User has signed in to the account and which language and currency the User has chosen.

In addition to cookies, the Platform uses other ways of storing data in the browser:

• localStorage and sessionStorage: browser storage whose data is not sent to the server automatically. sessionStorage data is deleted when the tab is closed;
• IndexedDB: a database inside the browser;
• browser fingerprint: an identifier that the FingerprintJS library computes in the browser itself from the browser's characteristics (version, fonts, screen resolution, etc.). The fingerprint is computed only for signed-in Users, is not stored in the browser, but is sent to the Platform's server and stored there.

In the Policy, the technologies listed above, together with cookies, are referred to as cookies, unless the text indicates otherwise.

First-party cookies are set by the Platform itself.

Session cookies are deleted after the browser is closed or after a short period expires. Persistent cookies are stored until the end of the period set for them or until the User deletes them in the browser.

A browser sends a website only those cookies that this website has set itself. The Platform cannot see the cookies of other websites, and other websites cannot see the cookies of the Platform.

Necessary cookies. The Platform does not work without them: they ensure signing in to the account, protection of the account and funds, detection of fraud and of circumvention of blocks, and storage of the User's cookie choice. Necessary cookies are set automatically. The grounds are the performance of the Rules, to which the User is a party, and the Operator's legitimate interest in protecting the Platform and Users.

Functional cookies. They remember the User's settings and actions: language, currency, time zone, hidden balance, search history, the response to the offer to enable push notifications. Their content is set by the User; without them, the chosen settings are not saved. Functional cookies are set automatically for the performance of the Rules. Some of them remain in the browser and are not sent to the server.

Analytics cookies. They are needed for visit statistics, finding errors and improving the interface. Analytics cookies are set only after the User has given consent to the processing of personal data. The consent is given separately from the Rules and the Policy: its text is published as a separate page and is opened from the cookie notice. Refusing analytics cookies does not limit the functions of the Platform.

Advertising cookies. They are needed, for example, to show IziMarket advertising on other websites to visitors of the Platform (retargeting) and to evaluate the effectiveness of advertising campaigns. They are set by advertising services whose code is placed on the Platform. Advertising cookies are set only after the User has given consent to the processing of personal data. This consent is given separately from the Rules, the Policy and the consent to analytics cookies (Appendix 1 to the Policy). Until consent is obtained, the code of advertising services is not loaded on the page. Refusing advertising cookies does not limit the functions of the Platform.

Advertising label cookie. If the User came to the Platform through an IziMarket advertising link carrying a campaign label (the ref or utm_campaign parameter in the address), the Platform stores a signed click number in the izi_ref cookie to attribute the User's sign-up to the campaign. The click itself is counted anonymously: the IP address and browser details are not stored; unique visitors are counted with an irreversible hash of them under a key that changes every day and is then destroyed. Without consent to analytics and advertising cookies, the label is kept only until the browser is closed (a session cookie). With consent, the label is kept until the end of the attribution period — 30 days from the click unless the Operator sets another period, but no more than 90 days. If consent is withdrawn, the label becomes a session cookie again. After sign-up or sign-in to an account, the label is deleted.

On the first visit to the Platform, the User sees a cookie notice with three options:

• “Accept all”: analytics and advertising cookies are enabled in addition to necessary and functional cookies;
• “Necessary only”: analytics and advertising cookies are not set;
• “Customize”: separate toggles for analytics and advertising cookies are opened. Both are off by default; the User turns each of them on independently.

The buttons are designed to be equally prominent. The notice does not block access to the Platform. Closing the notice without making a choice and continuing to use the Platform are not deemed consent to analytics or advertising cookies.

By clicking “Accept all”, the User gives the Operator two consents to the processing of personal data: using analytics cookies and using advertising cookies. Under “Customize”, each consent is given separately. Each consent is valid for 1 year from the date it is given or until it is withdrawn. Consent is not a condition for using the Platform and is given separately from acceptance of the Rules.

The Operator records the giving of consent and its withdrawal: the date and time, the version of the consent text, the option chosen and the browser identifier.

The User's choice is stored in a cookie for 1 year. After this period expires, after cookies are cleared or when the Platform is accessed from another browser, the notice is shown again.

The User may change the choice or withdraw consent at any time through the “Cookie” link in the footer of the Platform: it reopens the cookie notice. Consent may also be withdrawn by contacting the address specified in clause 5.4.

After consent is withdrawn, the code of the relevant services stops loading in that browser, and their cookies on the izi.market domain are deleted. The Operator stops processing the data obtained with their help and ensures its destruction within no more than 30 days from the date the withdrawal is received. Withdrawal of one consent does not affect the other. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal.

Cookies can be deleted or blocked in the browser settings. Blocking necessary cookies will make it impossible to sign in to the account and make purchases; blocking functional cookies will reset the settings. The choice applies in the browser and on the device where it was made.

The browser fingerprint is computed by the FingerprintJS library in the User's browser and is sent only to the Platform's servers. No data is transferred to the developer of the library.

First-party cookie data and the browser fingerprint sent to the server are stored on the Platform's servers provided by Hetzner Online GmbH. All Platform traffic, including cookie values, passes through the RU-Transit attack protection service. The storage location and the full list of data recipients are set out in the Privacy Policy.

The Operator amends the Policy in the manner set out in Section 17 of the Rules. A new version is published on the Platform with its date. If the Operator adds a new third-party service or a new category of cookies, or changes the purposes of processing based on consent, the cookie notice is shown to the User again, and such cookies are set only after new consent. Amending the Policy does not broaden the scope of consent given earlier.

Questions about the Policy, withdrawal of consent and other requests concerning data collected using cookies are sent through the support service chat or to admin@lolz.team.