Legal
Cookie notice
We use the cookies and browser storage the service needs to work, plus optional product analytics that stay off unless you accept them. No advertising cookies.
On this page
The short version
- Strictly necessary cookies keep you signed in and protect forms from bots. They cannot be switched off.
- Product analytics (PostHog) stay off until you choose Accept. Declining, Do Not Track or Global Privacy Control keeps them off.
- We use no advertising cookies, no Google Analytics and no social media pixels.
- Change your choice at any time with Cookie settings in the footer of every page.
This summary helps you find your way. The full text below is what applies.
1. What cookies and browser storage are
A cookie is a small file a website stores in your browser. Local storage and session storage do the same job without being sent to our servers. We treat them all the same way in this notice.
2. Strictly necessary cookies
These keep you signed in and secure. The service cannot work without them, so they are not optional and do not need consent.
| Name | Purpose | Set by | Lasts |
|---|---|---|---|
| __session, __client_uat and related Clerk cookies | Keep you signed in securely. | Clerk (for us) | Session, refreshed while you are active |
| prop_forsale_session | Keeps a signed-in admin session (HTTP only, secure). | prop.forsale | 30 days from last use, 90 days at most |
| prop_workspace | Remembers which workspace a signed-in user is working in. | prop.forsale | 30 days |
| dt_party_<deal> | Lets a person invited to a deal room back in without a password. | prop.forsale | 30 days from last use, 90 days at most |
| dt_invite_link | Shows an agent the invite link they just created, once. | prop.forsale | 2 minutes |
| pf_preview_<link> | Remembers that you unlocked a password-protected listing preview. | prop.forsale | Until the preview link expires |
| pf_signup_path | Carries your choice of agent or agency sign-up through sign-in. | prop.forsale | 1 day |
| __cf_bm, cf_clearance and Turnstile | Bot and abuse protection, including the check on forms. | Cloudflare (for us) | Up to 30 minutes (__cf_bm); set by Cloudflare for the others |
| pf_analytics_consent (local storage) | Remembers whether you accepted or declined optional analytics. | prop.forsale | Until you clear it |
3. Preference cookies and browser storage
A few preferences are kept so the site works the way you left it. None of them is used to track you across other websites.
| Name | Purpose | Set by | Lasts |
|---|---|---|---|
| pf:admin-sidebar (local storage) | Whether you keep the admin menu pinned open. | prop.forsale | Until you clear it |
| pf:command-recent (local storage) | The records you last opened from the admin command bar, so they show under Recent on this device. | prop.forsale | Until you clear it |
| pf_strength | The search depth you chose when searching on prop.forsale. | prop.forsale | 180 days |
| signup_attribution | Set only when you click a sign-up offer inside a deal room: records which offer and agency brought you, so the right agency gets credit. Contains no personal information and is read once at sign-up, then deleted. | prop.forsale | 30 days |
| prop-saved-preview, prop-intelligence-pending (session storage) | Places you saved and a search in progress. | prop.forsale | Until you close the tab |
| prop-chat-dock and console layout (local storage) | Where panels sit on screen. | prop.forsale | Until you clear it |
4. Analytics
Page views are counted on our servers without cookies and without identifying you. No Google Analytics or advertising pixels are used.
Optional product analytics (PostHog): only if you choose Accept in the cookie banner, we measure how pages and features are used, and may record session replays with every form field and marked sensitive areas masked. Replays are never recorded on deal room, document, verification (FICA) or payment pages. Data is sent through our own domain and processed by PostHog, Inc. in the United States. IP addresses are discarded. Signed-in users are linked by an internal account id, workspace id, plan and role only, never by name or email.
Until you accept, nothing is stored and no analytics events are sent.
Our servers also count a few business events (for example a deal opened or a listing published) per agency workspace. These are tied to your account id only if you accepted analytics while signed in; your choice is saved to your account for that purpose, and is off until you accept. Otherwise they carry the workspace id alone and no person profile is created.
| Name | Purpose | Set by | Lasts |
|---|---|---|---|
| ph_<project>_posthog (cookie and local storage) | A random id that links your visits for product analytics. | PostHog, through our own domain | Up to 1 year |
5. Do Not Track and Global Privacy Control
If your browser sends Do Not Track or the Global Privacy Control (GPC) signal, analytics stay off and the banner is not shown. When you are signed in, a GPC signal is also saved to your account as a decline, so our servers stop linking business events to you as well.
We honour GPC as a valid opt-out request under US state privacy laws. See the US privacy notice (/us-privacy).
6. Your choices
You can change your analytics choice at any time with the Cookie settings link in the footer of every page. Declining stops analytics and clears the analytics id, and, when you are signed in, also turns off account-level analytics on our servers.
You can clear or block cookies in your browser settings; blocking the strictly necessary ones will stop sign-in from working. See the privacy policy (/privacy) for more.