1. About this notice
This notice explains the cookies and similar browser-storage technologies used by RentReturn.
Cookies are small pieces of data stored by a browser. Websites and web applications may also use technologies such as sessionStorage to store information for a limited period.
RentReturn currently uses these technologies for account authentication and limited application-state/feedback purposes.
2. Current tracking position
In the production application audited on 5 September 2026:
- a fresh anonymous visit to the RentReturn homepage stored no cookies or browser storage;
- a fresh anonymous visit to the sign-in page stored no cookies or browser storage;
- signing in created a RentReturn/Supabase authentication cookie;
- signing out removed the observed authentication cookie;
- no active analytics or advertising-tracking integration or associated browser storage was identified in the inspected runtime and traffic.
Vercel project configuration contains analytics-related identifiers, but no active client instrumentation or analytics request was identified in the audited application.
3. Authentication cookie
RentReturn uses a Supabase authentication cookie family to maintain and refresh an authenticated account session.
| Technology | Provider | Purpose | Duration | Current category |
|---|---|---|---|---|
sb-[project-ref]-auth-token and possible numbered chunks | Supabase / RentReturn | Stores encoded authentication/session material so a signed-in user can remain authenticated | Written with a maximum browser lifetime of up to 400 days; removed on sign-out; actual token/session validity can be shorter | Strictly necessary authentication candidate |
The physical cookie may be split into more than one numbered cookie if the encoded session data becomes too large for one cookie.
The currently observed cookie is first-party and scoped to RentReturn.
4. Short-lived application feedback cookies
RentReturn contains three short-lived first-party cookies that support one-off feedback after particular property-setup actions.
| Name | Purpose | Data/value type | Duration | Current category |
|---|---|---|---|---|
rr-setup-mortgage-created | Shows feedback after a mortgage is created during property setup | Fixed event flag; the cookie path contains the relevant property identifier | Up to 60 seconds or until consumed | Functional/preferences candidate |
rr-setup-owner-added | Shows feedback after an owner is added | Fixed event flag; the cookie path contains the relevant property identifier | Up to 60 seconds or until consumed | Functional/preferences candidate |
rr-setup-ownership-allocation-saved | Shows feedback after an ownership allocation is saved | Fixed event flag; the cookie path contains the relevant property identifier | Up to 60 seconds or until consumed | Functional/preferences candidate |
These cookies are not advertising cookies and are not used to build a marketing profile.
5. Property-setup session storage
RentReturn also uses the browser's sessionStorage for a property-setup completion marker.
| Name | Purpose | Data stored | Duration | Current category |
|---|---|---|---|---|
rentreturn:standard-property-setup-finished:v1 | Supports a completion message/celebration after property setup | Property UUID, creation timestamp and version number | Removed when read; otherwise may remain for the browser's page/tab session. The application treats markers older than ten minutes as stale, but ten minutes is not the browser-storage expiry | Optional functional/preferences candidate |
This marker does not store the property address, property name or a financial amount.
6. Analytics and marketing technologies
RentReturn does not currently have an active advertising or analytics integration identified in the audited production runtime.
We do not currently use landlord property or financial records for advertising profiling.
If we introduce analytics, advertising, session replay or similar non-essential technologies in future, we will review their legal basis and consent requirements and update this notice before relying on them.
7. Cookie consent and preferences
RentReturn does not currently operate a general cookie-consent banner or preference centre.
Authentication technologies that are genuinely necessary to provide the signed-in service may be treated differently from optional technologies under applicable law.
8. Managing browser storage
You can use your browser settings to inspect, block or delete cookies and site storage.
Blocking technologies that are necessary for authentication may prevent you from signing in or remaining signed in.
Deleting a session cookie or signing out may end your current authenticated session.
9. Changes to this notice
We will review this notice when RentReturn changes the technologies it uses.
We will re-audit the live application before MVP publication and before introducing any material analytics, advertising or other tracking technology.
10. Contact
Questions about this notice: privacy@rentreturn.co.uk
General support: support@rentreturn.co.uk