The list
| Cookie | Category | Purpose | Duration | Provider |
|---|---|---|---|---|
| next-auth.session-token | Strictly necessary | Keeps you signed into your PropTurn account. | Session or up to 30 days if you ticked "keep me signed in". | PropTurn (first-party) |
| next-auth.csrf-token | Strictly necessary | Protects against cross-site request forgery on sign-in and account actions. | Session | PropTurn (first-party) |
| pt_consent | Strictly necessary | Stores your cookie-consent choices so we don’t keep asking. | 12 months | PropTurn (first-party) |
| pt_theme | Preferences | Remembers light / dark mode on the dashboard. | 12 months | PropTurn (first-party) |
| _ga, _ga_* | Analytics | Aggregated site-usage metrics — only set after you opt in. | Up to 13 months | Google Analytics 4 (third-party) |
Managing cookies
Most browsers let you block or delete cookies from the settings menu. If you block strictly-necessary cookies, you won’t be able to sign in. You can withdraw analytics or preferences consent at any time by clicking "Cookie settings" in the footer (coming with public launch) or by emailing privacy@propturn.co.uk.
Third-party cookies
When analytics is enabled, Google Analytics 4 is the only third-party cookie on the site. GA4 is configured with IP anonymisation and no advertising features. We do not use ad-tracking or social-media pixels.
More
See the privacy notice for how we handle personal data generally, and the trust centre for our sub-processor list.