Cookie Policy

1. What Cookies and Local Storage Are

Cookies are small files placed on your device by a website. Local storage and session storage are browser storage technologies that let a site remember settings or short-lived state. Pixels and tags are small scripts used for analytics, conversion measurement, or marketing where enabled.

In this policy, “cookies” refers to all of these technologies unless we say otherwise.

2. How We Use Cookies

We use cookies to run the Service, keep accounts secure, remember choices, measure website performance, and, where you consent, understand marketing and conversion activity.

Non-essential analytics and marketing tools are off by default and are loaded only after you give consent through our cookie banner or preferences panel. You can change your choices at any time using the “Manage Cookies” link in the website footer.

3. Cookie Categories

Essential Cookies

These are required for the website and app to work. They cannot be switched off through our cookie panel.

• authentication cookies used to keep you signed in;
• session and sign-out cookies used to manage secure account access;
• HMRC OAuth state and PKCE cookies used during HMRC authorisation;
• pending invite and signup consent cookies used during account creation or OAuth sign-in;
• cookie consent and preference storage used to remember your choices;
• security, fraud-prevention, rate-limit, and bot-protection technologies where enabled;
• checkout and billing portal cookies where you manage a paid subscription; and
• server logs and diagnostics needed to keep the Service reliable and secure.

Functional Cookies and Local Storage

These remember choices you make or help preserve app state.

• theme preference, such as light or dark mode;
• cookie preference records;
• dismissed banners, app install prompts, and UI preferences;
• draft ownership-plan data and other in-progress workflow state; and
• recently selected property or business context for transaction entry.

Analytics Cookies

Analytics cookies help us understand how people use the website and where we need to improve. These are optional and require your consent.

• website and product analytics tools, where configured;
• session insight tools, where configured; and
• diagnostics and error monitoring tools, which may also process technical data needed for essential service reliability.

Marketing Cookies

Marketing cookies and pixels help us measure adverts, understand conversion paths, and avoid wasting ad spend. These are optional and require your consent.

• advertising conversion measurement tools, where configured;
• social media marketing pixels, where configured; and
• similar campaign measurement tools if we add them in future.

4. Specific Storage We Use

The exact cookies and storage keys may change as providers update their services. Examples include:

• mtdlandlordservices-cookie-consent: records that you made a cookie choice.
• mtdlandlordservices-cookie-preferences: stores your essential, analytics, and marketing choices.
• Authentication session cookies: used by our authentication provider to keep you signed in.
• hmrc_oauth_state: short-lived HMRC OAuth security state.
• pending_terms_accepted / pending_marketing_opt_in: short-lived OAuth signup consent state.
• pending_invite_token: short-lived invite continuation state.
• reconciliation-banners-dismissed and other UI keys: remember dismissed banners or workflow preferences.
• Provider cookies: payment, security, analytics, marketing, and other providers may set their own cookies when their services are enabled and, where required, consented to.

5. Third-Party Providers

Third parties may set cookies or receive technical data when their services are used:

• Authentication, database, and storage providers: account login, secure sessions, user records, and file storage.
• Payment processors: checkout, payment, subscription management, and billing portal services.
• Security and bot-protection providers: fraud prevention, abuse prevention, rate limiting, and signup protection.
• Analytics and product improvement providers: website analytics, diagnostics, usage insights, and session analysis where enabled and, where required, consented to.
• Marketing and advertising partners: conversion measurement, social media pixels, and campaign attribution where you consent.
• Hosting and infrastructure providers: website delivery, platform logs, caching, and service availability.

6. How Long Cookies Last

Cookie and local storage durations vary by purpose and provider:

• Session cookies: usually expire when your browser session ends or when you sign out.
• Authentication cookies: last for the session duration set by our authentication provider or until you sign out.
• HMRC OAuth and signup consent cookies: short-lived, usually minutes, and cleared after the relevant redirect flow.
• Preference and consent storage: may remain until you clear browser storage or update your preferences.
• Analytics and marketing provider cookies: vary by provider and are controlled by your consent choices and browser settings.

7. Managing Your Choices

You can manage optional analytics and marketing cookies using the cookie banner or the “Manage Cookies” link in the footer. You can choose:

• essential cookies only;
• analytics cookies;
• marketing cookies; or
• all optional cookies.

You can also delete or block cookies in your browser settings. If you block essential cookies or storage, parts of the Service may not work, including login, HMRC authorisation, checkout, and saved preferences.

8. Do Not Track and Browser Signals

Some browsers offer “Do Not Track” or similar signals. There is no single industry standard for responding to these signals. We use our cookie banner and preferences panel to collect and apply your choices for optional analytics and marketing tools.

9. Changes to This Policy

We may update this Cookie Policy when our technology, providers, or legal obligations change. The date at the top shows when it was last updated.

10. Contact

If you have questions about cookies or tracking technologies, contact support@mtdlandlordservices.co.uk.

For more information about how we handle personal data, see our Privacy Policy.