Cookie Policy
What cookies we use and how you can control them.
Last updated October 2026
Cookies are small text files stored on your device when you visit a website. We use a small number of cookies to make this site work and, only with your consent, to understand how it is used so we can improve it.
The cookies we use
Strictly necessary
These are required for the site to function and cannot be switched off. None of them is used for analytics or advertising, and the ones that hold anything about your account are encrypted and can’t be read by scripts on the page.
- steve-morris-website-session and XSRF-TOKEN — a secure session cookie that protects our forms against cross-site request forgery. Gone after 120 minutes without a visit.
- sm_client — keeps you signed in to your account. It holds your sign-in tokens, encrypted. It goes when you sign out; without “Remember me” it also goes when you close your browser, and it never lasts more than 30 days.
- sm_2fa — set only while you sign in with two-factor authentication, for the few minutes the sign-in step lasts.
- action_pass — set when you confirm who you are on a one-time link we sent you, so you aren’t asked again on that page. It only works for that link and goes when the link expires.
- sm_device — a random code that lets us tell a browser you’ve signed in from before from a new one, so we can email you about a sign-in from a new device. It says nothing about who you are. Lasts up to 400 days.
We also keep a small record of your cookie choice in your browser’s storage so we don’t ask you again on every visit. While you fill in a form we send you (a one-time link, or a repair or message in your account), a copy of your answers is kept on your device so nothing is lost if the connection drops; it is cleared once the form is sent and never kept for more than 24 hours. On a rental application that copy lasts only until you close the tab.
Analytics (optional)
With your consent, we may use privacy-respecting analytics (currently PostHog) to measure how visitors use the site — for example which pages are most popular. These are only set if you select “Accept all” on our cookie banner. No analytics or tracking cookies are loaded until you consent.
Third-party services
Some pages load content from other companies, which means your browser connects to them directly and they will see your IP address:
- Mapbox — the location maps on property pages, the map search and our contact page are served by Mapbox. These load as part of the page rather than on consent, because the map is the content you asked to see. Mapbox does not set advertising cookies. See the Mapbox privacy policy.
- Street — property photographs and floorplans are served from our property software’s image service.
We do not embed social media trackers, advertising pixels or third-party comment systems anywhere on this site.
Managing your preferences
Use the Cookies button at the bottom-left of any page (or the control below) to open the banner and switch between “Essentials only” and “Accept all” at any time. You can also block or delete cookies through your browser settings, though the site may not work as intended without the necessary cookies.
More information
For how we handle any personal data, see our Privacy Policy. If you have any questions, contact us at [email protected].