The public website sets no cookies. The portal uses two, and only if they apply to you. Both are strictly necessary for signing in, so we don't ask your consent for them. The ICO's guidance on the cookie rules (PECR) permits strictly necessary cookies without a banner.
The cookies we set
Name:session
Purpose: keeps you signed in between requests
Flags: HttpOnly, Secure, SameSite=Lax
Expires: 14 days after you sign in, or immediately when you sign out
Third parties: none - the cookie is only readable by our own server
Name:dh_trust
Purpose: set only if you tick "Remember me on this device for 30 days" when entering your two-factor code. It lets this browser skip the code screen. Your password is still typed and checked every time you sign in
Flags: HttpOnly, Secure, SameSite=Lax
Expires: 30 days after you tick the box, and using it does not extend that. It also stops working the moment you change or reset your password, turn two-factor off, or forget the device under Account > Remembered devices
Third parties: none. We store only a one-way scrambled copy of the cookie's value, plus a rough device label ("Windows PC - Chrome") so you can recognise it in that list
Visit counting on the public website
The public website at properblocks.co.uk uses Cloudflare Web Analytics to count visits and measure how fast pages load, so we can see which pages are read and improve them. It sets no cookie, and we see only totals, such as how many visits each page had. The portal does not use it.
To stop it counting your visits, turn on Global Privacy Control in your browser (Brave and DuckDuckGo send it automatically; in Firefox it is the setting "Tell websites not to sell or share my data"), or use the button below. The website works the same either way.
Your visits are not being counted.
Switching counting off saves one small setting in this browser (pb-no-visit-count) so the choice sticks. It is never sent to us, and clearing this website's data in your browser removes it.
Cookies we do not set
No analytics cookies, such as the ones Google Analytics sets.
No advertising trackers, no tracking pixels, no ad-tech.
No social-media share-button cookies.
Fonts come from our own website, so nothing is fetched from Google.
If we ever add an analytics cookie
We will add a consent banner before it runs, and you will be able to reject as easily as accept.