Cookie Policy

Legal

Cookie Policy

Last updated: October 2026

What are cookies?

Cookies are small text files stored on your device when you visit a website. They allow the site to remember information about your visit, such as whether you are logged in, to make your next visit easier and the site more useful to you.

How we use cookies

Truelo uses two kinds of cookies. Strictly necessary cookies keep you logged in and protect your account; the platform cannot work without them. Analytics cookies help us count visits and understand how Truelo is used, so we can improve it and show landlords how many people viewed their listing. We do not use advertising cookies, we do not sell your data, and we do not use cookies to follow you across other websites.

Analytics cookies

We use two sources of analytics. First, a cookie of our own (visitor_id) is used when someone views a listing page: it is a random ID that is not linked to your name, email or account, and it lets us count unique visitors accurately, even when the same person comes back on another day. Landlords see only totals such as views and unique visitors — never who viewed their listing. We do not count views by the listing's owner or by our staff, and signed-in people are counted by their account instead of this cookie. Second, on truelo.co, Google Analytics sets its own cookies (_ga and _ga_<ID>) to show us how visitors find and use the site. Google Analytics is not active on our preview or development sites. We do not enable Google Signals or use Google Analytics for advertising. Separately, if you arrive from a link, search engine or blog article, your browser keeps a note of how you found us in its local storage for up to 30 days; if you sign up it is saved with your account to help us understand which channels bring people to Truelo.

Third-party cookies

Google Analytics is operated by Google, which processes the data it collects under its own Privacy Policy (policies.google.com/privacy). Our payment processor, Stripe, may also set cookies on their hosted pages during the payment flow; these are governed by Stripe's own Cookie Policy. We do not allow any other third party to set cookies on Truelo.

Managing cookies

You can turn off analytics without affecting how Truelo works. Turn on Global Privacy Control or Do Not Track in your browser and we will not set our visitor_id cookie. To stop Google Analytics, install the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout) or block cookies from this site in your browser settings; you can also delete cookies at any time. Our strictly necessary cookies are different: blocking them will stop you from logging in or using your account. If you wish to stop using Truelo, you can clear all cookies via your browser settings.

Changes to this policy

We may update this Cookie Policy when we change how we use cookies. Any changes will be reflected on this page with an updated date.

Cookies we set

Name	Type	Duration	Purpose
access_token	Strictly Necessary	Session / 15 minutes	Stores your JWT access token as an HttpOnly cookie. Required to authenticate your requests to the platform. Cannot be accessed by JavaScript.
refresh_token	Strictly Necessary	7 days	Used to silently renew your access token when it expires, keeping you logged in without re-entering your password.
csrf_token	Strictly Necessary	Session	A CSRF protection token sent with every mutating request (POST, PATCH, DELETE) to prevent cross-site request forgery attacks.
visitor_id	Analytics (ours)	1 year	A random ID, set by Truelo, that lets us recognise a returning visitor when we count views and unique visitors on a listing, so landlords see accurate numbers. It is an HttpOnly cookie sent only when a listing page is viewed, and it is not linked to your name, email or account. Not set for signed-in users (we count those by account), and not set if your browser sends a Global Privacy Control or Do Not Track signal.
_ga	Analytics (Google)	2 years	Set by Google Analytics on truelo.co to tell visitors apart, so we can see how many people use the site and which pages they visit.
_ga_<ID>	Analytics (Google)	2 years	Set by Google Analytics to keep track of the current visit (session state).