Unfiled_

    Cookie Policy

    Last updated: 20 October 2026

    This Cookie Policy explains how Unfiled (operated by Raemedy Limited) uses cookies and similar browser storage, why each item exists, how long it lasts and how you can control it. Read it alongside our Privacy Policy.

    We follow the UK Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. That means anything that is not strictly necessary to deliver the service you have asked for is only used after you have given consent, and you can withdraw that consent as easily as you gave it.

    1. What cookies and browser storage are

    A cookie is a small text file placed on your device by a website, and sent back to that website on later visits. Websites can also use local storage and session storage, which keep small values in your browser without sending them automatically with every request.

    Unfiled uses all three. Local and session storage are used for signing you in and remembering your choices; cookies are mainly used by the optional analytics and advertising measurement services described below.

    • First-party items are set by Unfiled itself.
    • Third-party items are set by a provider such as Google or Meta.
    • Session items are cleared when you close the browser; persistent items last for a defined period.

    2. Strictly necessary storage

    These items are required to deliver the Service you have requested. Because they are strictly necessary, they do not require consent under PECR, and they cannot be turned off within the Service.

    • Authentication session — keeps you signed in across pages and tabs and lets your browser prove who you are when loading your records. Stored in local storage by our authentication provider. Persists until you sign out or the session expires.
    • Security and state tokens — used during HMRC and Companies House sign-in redirects to verify that the response came back to the right place and was not tampered with. Short-lived.
    • Google and Apple sign-in — when you choose these methods, session storage holds a single sign-in attempt that is valid for ten minutes, and the authentication SDK stores a temporary code verifier. These are used to validate the response and are consumed on completion. An abandoned attempt is removed when the tab closes or replaced when you start again. Provider-side cookies are governed by Google’s or Apple’s policies.
    • Active business profile — remembers which of your businesses you are currently working in, so figures and documents are not mixed between companies.
    • Cookie consent choice — records whether you accepted or rejected optional cookies, so we do not ask you again on every page. Stored under unfiled_cookie_consent and unfiled_marketing_consent_v2, persistent until you change it or clear your browser.
    • Interface preferences — small values such as panel and display settings.
    • Staged statement — if you drop a bank statement on the home page before signing in, the file is held in session storage on your own device so it is ready to import once you sign in. It is cleared once imported, or when you close the browser.

    3. Analytics cookies (optional)

    If you choose “Analytics only” or “Accept all optional” on the cookie banner, we load Google Analytics (provided by Google Ireland Limited) to understand how visitors use the site. This helps us see which guides are useful, where people get stuck, and what to improve. Nothing is loaded before you choose.

    Google Analytics may collect:

    • Pages you view and how long you spend on them.
    • Your approximate location at country or city level, and your device type.
    • How you arrived at the site, for example a search engine or referral link.
    • A unique client identifier stored in cookies such as _ga and _ga_<id>, typically lasting up to two years.

    We do not send Google Analytics your name, email address, company details, tax figures or the contents of anything you upload. You can withdraw or change consent at any time using the “Manage cookies” button in the “How to control cookies” section below.

    4. Advertising measurement cookies (optional)

    If you choose “Accept all optional”, we load the Meta Pixel (provided by Meta Platforms Ireland Limited) on the Unfiled landing and sign-up pages only. It helps us measure whether an advertisement led to a visit or a completed registration. We do not load the Pixel on authenticated tax, accounts or transaction pages, so it is never present while you are working on your figures.

    The Meta Pixel may collect:

    • A page-view or completed-registration event.
    • Browser, device, IP address and referring-page information.
    • Identifiers stored in Meta cookies such as _fbp and _fbc, typically lasting up to 90 days.

    With advertising and analytics consent, Google Analytics also measures completed registrations and purchases of our filing service and shares this event with our linked Google Ads account. This includes a random transaction reference, the service price and currency, and the service name. It excludes your identity, company details, tax figures and checkout session. A local storage marker prevents the same purchase being reported repeatedly.

    Unfiled never sends these providers your name, email address, account identifier, tax or financial information, form contents, or values entered into the Service. These cookies are optional and are only placed after you consent.

    5. How to control cookies

    To change your analytics or advertising preference at any time, use the button below. It reopens the cookie banner so you can accept, reject or change your choices. Rejecting optional cookies stops new data being sent to Google and Meta from that point forward, and removes their measurement cookies where your browser permits it.

    You can also clear or block cookies and storage through your browser settings, usually under Privacy or Site settings in Chrome, Safari, Firefox or Edge. Most browsers let you block third-party cookies while keeping first-party ones.

    Please note that blocking strictly necessary items will sign you out, lose your business profile selection, and may prevent parts of the Service from working at all.

    You can opt out of Google Analytics across all websites using the Google Analytics opt-out browser add-on.

    6. Visitor journeys (optional)

    With your analytics consent, we record which pages and actions you use and roughly how long you spend, and link the visit to your account when you sign in. We never record form contents, tax figures, passwords or documents. Records are stored in the UK and deleted within 90 days, or when you delete your account.

    To do this we keep the consent version in local storage and a visit credential in session storage. If you withdraw consent using Manage cookies above, tracking stops and the credential is removed.

    7. Changes

    We may update this policy as the Service evolves or as our providers change. The “last updated” date at the top reflects the latest version. Where a change introduces a new optional cookie, we will ask for your consent again.

    8. Contact

    Questions about cookies or your privacy? Use our contact form. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.