The three cookies EasyPM sets
Consent banners exist because most sites set cookies for advertising and analytics, which need your permission. EasyPM sets none of those. Every cookie below is either required to keep you signed in or is a setting you changed yourself, and neither kind needs a banner to interrupt you.
What is set, and why
Keeping you signed in
sb-<project>-auth-token — set by Supabase, which runs our sign-in. It holds the token that proves you are you. Without it every page would ask you to sign in again. It is split across two cookies when the token is too long for one, so you may see it twice with .0 and .1 on the end.
Strictly necessary. Removing it signs you out. It is marked HttpOnly, so no script on the page can read it.
Remembering you on this device
epm_remember — records whether you ticked Keep me signed in. Ticked, your session survives closing the browser; unticked, it does not. It holds a single character and nothing about you.
The shape of your screen
easypm_nav — remembers whether you folded the side panel away. It is read on the server so the page arrives already folded rather than jumping after it loads.
Not cookies, but worth saying
Your browser also keeps one setting in local storage: easypm.tenancy-view, which remembers whether you last looked at your tenancies as cards or as a table. It never leaves your device and we cannot read it.
What we do not set
- No analytics. We do not measure which pages you visit, how long you stay, or where you came from.
- No advertising or tracking cookies. Nothing here follows you to another site and nothing tells anybody you were here.
- No third-party scripts on your account pages. The Content Security Policy refuses any script we did not put there ourselves.
Cookies set by somebody else
Two moments hand you to another company, and their cookies are theirs rather than ours:
- Paying by card sends you to Paystack’s own checkout page. What Paystack sets there is covered by Paystack’s policy. We never see your card details.
- Signing in with Google, if your landlord has it switched on, sends you to Google to sign in.
Neither happens unless you choose it, and neither can be triggered by simply opening a page.
Turning them off
Your browser can block or clear cookies for this site at any time. Blocking the sign-in cookie will stop you from signing in at all — there is no way to keep you signed in without it. Clearing the other two loses your keep me signed in choice and your panel setting, and nothing else.
This page describes what the product does today. It sits alongside the privacy summary, which covers the data itself, and the terms. If we ever add a cookie, this list changes in the same commit.