Cookies
Cookies and similar storage
Last updated: 16 May 2026
What cookies are
Cookies are small text files set in your browser when you visit a website. They let a site remember things like whether you are signed in, or how you interact with the product. We also use a small amount of browser localStorage, which under the UK Privacy and Electronic Communications Regulations (PECR) is regulated in the same way as cookies.
Under PECR, we must ask for your consent before setting any cookie or storage key that is not strictly necessary for the service you have requested. You can change your preference at any time using the link in the footer.
Strictly necessary (no consent required)
These keep the service working: signing you in, processing payments, and protecting the site from automated abuse. PECR allows them without consent because they are strictly necessary to deliver the service you have asked for.
| Name | Purpose | Lawful basis | Provider | Lifetime |
|---|---|---|---|---|
| sb-* (multiple) | Supabase authentication session (keeps you signed in across page loads). | Strictly necessary | Supabase (first-party context) | Session token rotates; refresh token up to 7 days |
| __cf_bm | Cloudflare bot-detection token, set when you cross the Cloudflare edge. | Strictly necessary | Cloudflare | 30 minutes |
| cf_clearance | Cloudflare challenge clearance after passing a security check. | Strictly necessary | Cloudflare | Up to 1 year (rotated regularly) |
| Stripe checkout tokens | Set by Stripe when you start a checkout. We never see them on our domain; they live on stripe.com / checkout.stripe.com. | Strictly necessary | Stripe (third-party domain) | Session |
| pl_consent | Records your cookie-banner choice (Accept all / Reject non-essential) so we do not ask again. | Strictly necessary | PropertyLord AI (first-party) | 12 months |
Analytics (only after consent)
These help us understand how the product is used so we can improve it. They are only set afteryou choose "Accept all" on the cookie banner. If you choose "Reject non-essential", none of these are set.
| Name | Purpose | Lawful basis | Provider | Lifetime |
|---|---|---|---|---|
| ph_* / _posthog | PostHog product analytics: page views, button clicks, feature usage. | Consent (PECR) | PostHog | 12 months |
Browser localStorage we use
We use a small amount of first-party localStorage for service features. These are not cookies but PECR treats them similarly.
| Name | Purpose | Lawful basis | Provider | Lifetime |
|---|---|---|---|---|
| sitemargin_usage_<toolId>_<YYYY-MM> | Free-tier usage counter for a given calculator in a given month. Used to enforce the free-quota gate before signup. | Legitimate interests (fraud / abuse prevention on the free tier) | PropertyLord AI (first-party) | Persistent until you clear browser storage |
Note: the sitemargin_usage_prefix is a historical artefact of an earlier brand. We have deliberately left it unchanged so that existing users do not lose their free-tier counter mid-month. New keys use neutral naming.
Advertising cookies
None. We do not run third-party advertising on propertylord.ai and we do not share data with advertising networks.
Changing your preference
You can change your cookie preference at any time. Click the "Cookie preferences" link in the footer, or clear the pl_consent cookie in your browser and reload the page to be asked again.
You can also block cookies entirely in your browser settings. If you block strictly necessary cookies, sign-in and payment will not work.
More information
For the full picture of how we handle personal data, see our privacy policy. For questions about cookies specifically, email privacy@propertylord.ai.