Cookie Policy
Last updated: July 2026
This policy explains how the Ola Accountancy platform uses cookies and similar technologies. It should be read alongside our Privacy Notice.
Our approach
We use only strictly necessary cookies - the ones required to sign you in and keep your session secure. We do not use advertising, marketing or third-party tracking cookies, and we do not build advertising profiles or share data with ad networks.
Because we set only strictly necessary cookies, we do not require opt-in consent under the Privacy and Electronic Communications Regulations 2003. The notice we show is for transparency.
Cookies we set
| Name | Type | Purpose | Expiry |
|---|---|---|---|
oa-session |
Strictly necessary | Keeps you signed in to the platform. Contains a hashed, server-verified session token - never your password. First-party, HttpOnly and Secure. | 8 hours (or when you sign out) |
| HMRC OAuth cookies | Strictly necessary | Short-lived cookies set during HMRC agent authorisation to secure the OAuth handshake (set by HMRC's secure sign-in service). | End of the authorisation flow |
Browser storage
We also store a small amount of data in your browser's local storage. This is not a cookie and is never sent to third parties:
| Key | Purpose |
|---|---|
oa-cookie-consent |
Remembers that you have seen the cookie notice, so it is not shown on every visit. |
oa-paid-ack-… |
Remembers that you have seen a one-time payment confirmation in the client portal. |
oa-mtd-device |
A random device identifier included in HMRC's mandatory fraud-prevention headers when using Making Tax Digital features. Required by HMRC; not used for tracking. |
oa-client (session storage) |
Remembers which client record a staff member last had open. Cleared when the browser tab closes. |
Third-party services
We load fonts from Google Fonts, icons from Font Awesome, and process card payments via Stripe. When your browser loads these resources, your IP address is shared with those providers solely to deliver the content securely. They do not use it for tracking or profiling, though they may set their own strictly necessary cookies to serve the request.
Card details are entered on Stripe's own secure checkout page and never touch our systems. See our Privacy Notice for the full list of data processors.
Managing cookies
Because our cookies are strictly necessary for the platform to function, blocking them may prevent you from signing in or completing HMRC authorisation. You can control or delete cookies at any time through your browser settings - see your browser's help pages for instructions.
Clearing your browser's local storage will reset the cookie notice and other preferences listed above.
Changes to this policy
If we ever introduce analytics or other non-essential cookies, we will update this policy and ask for your explicit consent before setting them. Any changes will be reflected by the "Last updated" date above.
Contact
Questions about cookies or privacy? Email privacy@ola-accountancy.co.uk.