Cookie notice
Last updated October 2026.
1. Our approach
We use strictly necessary cookies — the ones required to run the Service and keep it secure. Under the Privacy and Electronic Communications Regulations (PECR), these do not require consent. We also use Google Analytics cookies, but only if you accept them: until you do, Google Analytics does not load and sets no cookies, and rejecting is as easy as accepting. We do not use advertising or social-media tracking cookies. Our own website visit logging is cookieless.
2. Cookies we set
| Name | Purpose | Expiry |
|---|---|---|
ct600filer_session |
Keeps you signed in and maintains your session. | Session / 2 hours |
XSRF-TOKEN |
Protects forms against cross-site request forgery (security). | Session / 2 hours |
taxley_consent |
Remembers whether you accepted or rejected analytics cookies, so we don't ask on every page. | 6 months |
Google Analytics (only if you accept)
If you choose Accept analytics cookies, we use Google Analytics to produce usage statistics we see in aggregated reports — which pages are visited, how visitors find us, and what kind of device they use — so we can improve the website. Until you accept, Google Analytics does not load and sets none of these cookies. It runs only on our public pages, never in your account, and we send Google each page's address without its query string, apart from standard campaign tags. The provider is Google.
| Name | Purpose | Expiry | Provider |
|---|---|---|---|
_ga |
Distinguishes visitors with a random ID, so visits can be counted. | 2 years | |
_ga_FD7QK11Y7D |
Keeps track of the current visit (session). | 2 years |
Changing your choice: use at the bottom of any page on our public website. If you withdraw your consent, Google Analytics stops straight away, in every open tab, and does not load again, and we delete its cookies from your browser. We keep your choice for 6 months, then ask again. See how Google uses information from sites that use its services.
3. Third-party cookies
When you pay, Stripe may set cookies needed to process the payment and prevent fraud. See Stripe's own cookie and privacy notices. We do not embed advertising or social-media trackers.
4. Managing cookies
You can block or delete cookies in your browser settings, but the Service will not work correctly without the session and security cookies above (you would not be able to sign in or submit forms safely).
5. More
See our Privacy policy for how we handle personal data.