Cookie policy
What the public website stores, what Cloudflare may set for security, and how the separate CMS administrator interface differs.
Last updated: 4 November 2026
Public website
Our audit found no advertising, marketing, newsletter, or behavioural analytics cookies on the public Worth It Shelf website. The site does not intentionally store public search queries or reading activity in cookies, local storage, or session storage. Pagefind search runs from same-origin static files in your browser.
Strictly necessary Cloudflare cookies
Worth It Shelf is delivered and protected by Cloudflare. Cloudflare may set strictly necessary cookies when a security, bot-management, rate-limiting, availability, or challenge feature requires them. A cookie may therefore appear only for some visitors or circumstances.
| Name | Provider | Purpose | Verified duration |
|---|---|---|---|
__cf_bm | Cloudflare | Bot-management and abuse protection when the relevant Cloudflare feature is enabled. | Expires after 30 minutes of continuous inactivity. |
cf_clearance | Cloudflare | Stores proof that a Cloudflare security challenge was passed. | Cloudflare’s default challenge-passage duration is 30 minutes; the configured value may vary. |
cf_ob_info, cf_use_ob | Cloudflare | Supports Cloudflare Always Online during an origin failure. | 30 seconds. |
_cfuvid | Cloudflare | May distinguish visitors sharing an IP address when a corresponding rate-limiting option is enabled. | Cloudflare-controlled and dependent on the enabled rule. |
These entries document cookies that Cloudflare may use; they do not mean every cookie is set on every visit. Sampled public responses during this audit did not include a Set-Cookie header.
Administrator interface
The separate /admin/ interface is intended for authorised editors. Decap CMS, Decap Turbo, GitHub, and their authentication providers may use cookies or browser storage to maintain an administrator session and secure the editorial workflow. Those technologies are not required simply to read the public site.
Third-party links
When you follow an external or affiliate link, the destination website may use its own cookies and similar technologies. Its policy applies after you leave Worth It Shelf.
Consent
We do not display a consent banner because the verified public implementation does not use non-essential cookies or similar tracking. If analytics, advertising, embedded media, or another non-essential technology is introduced, we will reassess consent requirements and update this policy before activation.
Controller and questions
The website operator and data controller is Milen Naydenov Penev, an individual based in Bulgaria. For questions about cookies or privacy, email contact@worthitshelf.com. For the wider data-handling context and your rights, see the Privacy Policy.