Cookie Policy
Last updated: 13 July 2026
This site is operated by Data Law Limited, trading as Datalaw (Data Protection Officer: Henry Dean, dpo@datalaw.org). Cookies are small files a website stores on your device. We use them to keep you signed in, to remember your preferences, and to understand how the site is used. Some are set by us and some by the companies that help us run the service. This policy should be read with our Privacy Policy.
The cookies we use
Strictly necessary — always on, no consent needed
These are required for the site to work and are exempt from the consent requirement under PECR.
| Cookie(s) | What it does | Set by | Lasts |
|---|---|---|---|
better-auth* / __Secure-* | Keeps you signed in and secures your session. | Us (first party) | Session |
cf* / __cf* | Cloudflare Turnstile — protects sign-in and sign-up pages from bots. | Cloudflare (third party) | Varies |
cookie_consent | Remembers the cookie choice you have made. | Us (first party) | Persistent |
Functional — remember your preferences
| Cookie(s) | What it does | Set by | Lasts |
|---|---|---|---|
sidebar_state / sidebar_width | Remembers how you left the dashboard sidebar. | Us (first party) | Months |
firm_signup_name / firm_signup_firm_name / firm_signup_sra_number | Carries your firm details through sign-up when you use an email link. | Us (first party) | About 1 hour |
Analytics — on by default, opt out any time
These run by default so we can measure how the site is used from the first visit. You can switch them off at any time by choosing Reject non-essential in the cookie banner, or by reopening it from the Cookie preferences control in the footer. When you opt out, our tag manager and Google Analytics receive a "denied" signal and stop setting these cookies.
| Cookie(s) | What it does | Set by | Lasts |
|---|---|---|---|
_ga / _ga_<id> | Google Analytics 4 (loaded through Google Tag Manager) — measures which pages people visit and how they get around. | Google (third party) | Up to 2 years |
We also use Vercel Web Analytics and Speed Insights to measure traffic and page performance. These do not set cookies, but they process usage data and are covered in our Privacy Policy.
Advertising
We do not use advertising cookies. Advertising storage is switched off by default, and would only ever run if we introduced it and asked for your consent first — in which case this policy would be updated before anything changed.
Your choices
Analytics cookies run by default, and you can opt out of them at any time by choosing Reject non-essential in the cookie banner or by using the Cookie preferences control in the site footer. Advertising storage stays off unless we introduce it and ask for your consent first. You can also block or delete cookies in your browser settings, though some parts of the site (such as staying signed in) may not work properly if you block the strictly necessary ones. Turning off analytics does not affect your ability to use the site.
For more on the third parties above, see the privacy policies published by Google, Cloudflare and Vercel.
Changes and contact
We update this policy when the cookies we use change; the date at the top shows the current version. Questions: Data Protection Officer, Data Law Limited — dpo@datalaw.org — 0151 236 2024.