Last updated: 4 October 2026
Applies to: tenancy-vault.co.uk, app.tenancy-vault.co.uk, and related TenancyVault service domains
Cookies and similar technologies are small pieces of data stored in your browser or device. They help websites remember choices, keep you signed in, and understand how services are used.
We use browser storage for three main purposes:
We use PostHog for page views and named-event analytics to help improve usability and support. PostHog session replay, autocapture and heatmaps are disabled on the marketing site and app. On this marketing site, PostHog loads only after you accept analytics cookies. In the app and tenant portal, when analytics is enabled, an explicit necessary-only choice blocks PostHog analytics, but it can initialise when no cookie choice has been recorded. Server-side analytics events are controlled separately by server configuration, not by the browser cookie choice. Our app also uses browser local storage for short-lived access tokens and certain flow state, which is not a cookie but is a similar browser technology.
Under UK rules, we ask for your consent before placing non-essential cookies, such as marketing-site analytics cookies. Strictly necessary cookies and equivalent browser storage used to run the app do not require consent.
You can review your choice at any time using:
If you switch from analytics to necessary-only cookies on the marketing site, we stop PostHog page and named-event analytics and try to remove the PostHog cookies and storage we can control. You may still need to clear existing cookies in your browser.
The table below reflects the browser storage used by the current implementation of TenancyVault. Some items are cookies and some are browser local-storage keys.
| Type | Name / key | Provider | Purpose | Typical duration |
|---|---|---|---|---|
| Cookie | tv_cookie_consent | TenancyVault | Stores your cookie preference on the marketing site | 1 year |
| Cookie | refreshToken | TenancyVault API | Maintains authenticated landlord / agent sessions | Up to 30 days |
| Cookie | tv_trusted_device | TenancyVault API | Remembers a trusted device for two-factor authentication | Up to 30 days |
| Cookie | tenant_rt | TenancyVault API | Maintains authenticated tenant portal sessions | Up to 7 days |
| Cookie | ph_*_posthog | PostHog | Analytics identifier and session state. On the marketing site, set only after consent. In the app and tenant portal, analytics can initialise without a recorded choice, but an explicit necessary-only choice blocks it. | Up to 1 year |
| Local storage | access_token | TenancyVault app | Stores a short-lived landlord / agent API access token | Typically 15 minutes or until replaced / logout |
| Local storage | tenant_access_token | TenancyVault tenant portal | Stores a short-lived tenant API access token | Typically 15 minutes or until replaced / logout |
| Local storage | pending_checkout_session_id | TenancyVault app | Helps complete the return flow from Stripe Checkout | Until synced or removed |
On the marketing site, analytics cookies are only set if you consent. Necessary auth cookies and browser storage are used only when you use the app or tenant portal.
Most browsers let you:
Blocking strictly necessary cookies or clearing app storage may sign you out or stop parts of TenancyVault working correctly. You can also reopen our .
We may update this Cookie Policy as we change our cookies, browser storage, or providers. We will update the date above when we do.
See also: Privacy Policy
