Last updated: 21 August 2026.
This explains the cookies FreeholdMate sets in your browser, what each one does, and how long it lasts. It's a companion to our Privacy Policy, which covers the personal data behind them in more detail. La Vida Ventures Ltd, a company registered in England & Wales (company number 17368286), registered office 82a James Carter Road, Mildenhall, United Kingdom, IP28 7DE is responsible for the cookies described here.
These keep the Service working and can't be switched off — there's no consent banner for them because the law doesn't require one for cookies that are essential to a service you've asked for. We never use them for advertising, and none of them are shared with a third party.
| Cookie | Purpose | Duration |
|---|---|---|
sid | Keeps you logged in between requests. This is the only cookie that identifies you as a specific account. | 30 days, or until you log out |
2fa | Holds a short-lived challenge token while you complete two-step verification at login. | 10 minutes |
pending_invite | Carries a team-invite token through the login or signup form so accepting an invite and creating an account can happen in one step. | 10 minutes |
ch_oauth_state | An anti-forgery state value used only while a director is connecting their Companies House account (see the Privacy Policy, "Companies House connection"), checked immediately on return and then discarded. | 10 minutes |
cookie_consent | Remembers whether you accepted or declined analytics cookies, so we don't ask again on every page. Holds only the word "accepted" or "rejected" — nothing that identifies you. | 180 days |
All five are set with HttpOnly (unreadable to any JavaScript, including ours) — except cookie_consent, which JavaScript in your browser has to be able to read to know whether to show the banner again — plus SameSite=Lax, and Secure on the live site, so they're only ever sent back over HTTPS.
| Cookie | Purpose | Duration |
|---|---|---|
attribution | Remembers which marketing link or search result brought you to the site, so that if you sign up later we can tell which page or campaign actually worked. It holds only the referring link and UTM parameters already present in the page you first landed on — nothing that identifies you — and is deleted the moment you sign up. | 30 days |
This one isn't strictly necessary for the page to function, but it's first-party, contains no identifying information, is never sent to or read by anyone outside FreeholdMate, and doesn't track you across other websites.
We use PostHog (hosted in the EU) for product analytics — page views, feature usage, and where signups drop off — so we can tell which parts of the Service are actually working. When it's configured, PostHog's script sets its own cookies (typically named ph_<project-id>_posthog and similar) to recognise repeat visits and group events into a session, and — depending on how the project is configured on PostHog's side — may also record anonymised session activity for debugging purposes.
These are not strictly necessary cookies, so they're not set by default. On your first visit, a banner asks whether you're OK with analytics cookies. Nothing from PostHog runs, and no PostHog cookie is set, until you click "Accept analytics" — no script request, no cookie, no session identifier, nothing. If you click "Necessary only," or close the banner without choosing, it never runs at all. Your choice is remembered (in the cookie_consent cookie above) for 180 days, and you can change it any time via the "Cookie preferences" link in the footer.
We don't use PostHog, or anything else, for advertising, retargeting, or building a profile of you to sell or share with ad networks.
No advertising or retargeting cookies, no third-party ad networks, and no cross-site tracking pixels. Stripe's checkout, when you subscribe, runs on Stripe's own hosted page and any cookies it sets there are Stripe's, governed by Stripe's own cookie policy — none of that reaches freeholdmate.com. Google Fonts, used for the typefaces on this site, doesn't set a cookie, though your browser does contact Google's servers directly to fetch the font files.
For analytics, the "Cookie preferences" link in the footer reopens the banner so you can change your answer at any time — that's the quickest way to switch it on or off. Beyond that, you can also block or delete any cookie through your browser's own settings — every major browser has a page for this under "Privacy" or "Cookies." Blocking the strictly necessary cookies in section 2 will stop you being able to log in or complete some flows; blocking the attribution cookie in section 3, or declining analytics in section 4, won't affect anything you can do on the Service.
We may update this policy as the cookies we use change. If we make a material change, we'll update the date at the top of this page; for anything that affects how we handle your data more broadly, see the Privacy Policy's own change process.
Questions about any cookie listed here: [email protected].