Last updated: 2026-05-06
A cookie is a small text file stored by your browser when you visit a website. Cookies allow the site to remember information between page loads (for example, that you're logged in) or between visits. Some cookies are set by the site you're visiting ("first-party"); others are set by services embedded on the page ("third-party").
Under the Privacy and Electronic Communications Regulations (PECR), websites must obtain consent before placing cookies that are not "strictly necessary" for the service the user has requested. Strictly-necessary cookies — for example, the session cookie that keeps you logged in — are exempt.
Prospera's design choice is to use only strictly-necessary cookies plus a small number of functional cookies that the user explicitly invokes (e.g. by clicking "Pay" and being routed to Stripe Checkout). This means we do not need a consent banner. If we ever introduce analytics or marketing cookies, we will add a granular consent control before they fire.
| Name | Purpose | Duration | First / third party |
|---|---|---|---|
session | Keeps you logged in. Required for the application to work. | Browser session, or up to 30 days if you tick "Remember me". | First-party |
csrf_token | Cross-site request forgery protection on form submissions. | Browser session. | First-party |
remember_token | Persistent login when "Remember me" is selected. | 30 days from last login. | First-party |
| Name | Purpose | Duration | First / third party |
|---|---|---|---|
Stripe cookies (e.g. __stripe_mid, __stripe_sid) |
Secure payment processing and fraud prevention. Set only when you reach a checkout page. Governed by Stripe's privacy policy. | 30 minutes – 1 year (Stripe-controlled). | Third-party (Stripe, payment processor) |
None. We do not use Google Analytics, Mixpanel, Amplitude, Hotjar, Facebook pixel, or any equivalent analytics / advertising technology. We do not place tracking pixels on emails.
We may add a privacy-respecting analytics tool in the future (e.g. Plausible / Fathom — both cookieless). If we do, this policy will be updated and you will see no cookie because they don't set one. If we ever introduce a cookie-using analytics tool, a consent banner will appear before any cookie is set.
The application uses your browser's local storage (not a cookie) to remember UI preferences such as collapsed/expanded panels, dismissed tip cards, and table column widths. Local storage doesn't transmit data to us across page loads — it stays in your browser. You can clear it via your browser's developer tools or by clearing browsing data.
Most browsers let you view, manage and delete cookies. The relevant settings:
Blocking strictly-necessary cookies will break Prospera (you won't be able to log in). Blocking Stripe's cookies will block payments.
For the full picture of how we handle personal data — including how cookie data interacts with the rest of our processing — see our Privacy Notice. For all third-party services we use, see Sub-processors.
We will update this policy if we change which cookies we use. The "last updated" date at the top reflects the most recent revision.