Cookie Policy
Last updated: 8 October 2026
Cookies are small text files placed on your device when you visit a website. They help the site work properly and can provide information to the site owner. You can read more about cookies in the ICO's guidance on cookies.
This page explains which cookies DormantFile sets, why we use them, and how you can control your preferences.
Essential cookies
These cookies are required for the site to function. They cannot be switched off.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
__Secure-next-auth.session-token | Keeps you signed in | 30 days, renewed while you use the site; deleted on sign-out | Essential |
__Host-next-auth.csrf-token | Prevents cross-site request forgery | Session | Essential |
__Secure-next-auth.callback-url | Remembers where to send you after signing in | Session | Essential |
__Secure-next-auth.state, __Secure-next-auth.pkce.code_verifier | Protect the "Continue with Google" handshake against forgery. Set only while you sign in with Google | 15 minutes | Essential |
df_google_signup | Carries your sign-up choices (company, plan, marketing opt-out) across the Google sign-in redirect. Set only when you create an account with Google | 15 minutes | Essential |
df_ref | Remembers the referral link you arrived by, so the right person is credited. Set only if you arrive via a referral link | 30 days | Essential |
df_tools_session | An anonymous identifier used to rate-limit our free tools and stop automated abuse. Set only when you use a free tool | 12 months | Essential |
df_letter_scan | Carries what our free letter reader found — a company number, UTR, accounting period and letter type — into sign-up, so those details are already filled in if you create an account. Set only when the free reader finds one of them. Not readable by scripts | 24 hours | Essential |
Cookie consent
Your decision (accept or decline) is stored in your browser's local storage rather than in a cookie, together with the date you made it and the version of this policy you made it against. If we change this policy, the banner asks you again — a decision made about an earlier version of this page is not treated as a decision about this one.
Analytics cookies (optional, consent required)
We use Google Analytics to understand how people use DormantFile so we can improve the service.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
_ga | Distinguishes unique visitors (Google Analytics) | 2 years | Analytics |
_ga_* | Maintains session state (Google Analytics) | 2 years | Analytics |
Analytics cookies are only set if you click "Accept" on our cookie consent banner. Until you do, Google's code is not loaded at all: no script runs, no cookie is set, and nothing you do in your browser is reported to Google. If you decline, that remains the case.
Google Analytics data is used in aggregate to see which pages are visited and how the service is used. We do not use it to identify individual users.
Separately from cookies, a handful of account milestones — sign-up, email verification, payment, and an accepted filing — are reported to Google Analytics from our own servers, under a pseudonymous identifier that is never placed on your device. This happens whether or not you accept analytics cookies, and it is described in our privacy policy.
Ad measurement cookies (optional, consent required)
We run a small number of Google search ads. To know whether they work, we need to know when someone who clicked one of them went on to sign up or buy a plan.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
_gcl_aw | Records that you arrived by clicking one of our Google ads | 90 days | Ad measurement |
Other _gcl_ cookies, such as _gcl_au | Google may set these for the same purpose: linking a visit to a click on one of our ads | 90 days | Ad measurement |
These are set by the same Google code as the analytics cookies, and only if you click "Accept". When you accept, that code loads with Google's consent signals set: analytics storage, advertising storage and advertising user data are granted, so that if you arrived from one of our ads, Google Ads is told whether your visit led to a sign-up or a purchase. Ad personalisation is always denied: we never let Google use your visit to show you ads, on this site or anywhere else, and we do not use remarketing. Google Ads uses this information as an independent controller — see how Google uses information from sites that use its services.
We do not sell your data, and we do not share it with any other advertiser.
If you later withdraw consent, we stop Google's code, tell Google that consent has been withdrawn, and delete the _ga and _gcl cookies from your browser.
Embedded content
Some pages embed a small Trustpilot widget showing our review score. The widget loads in an iframe served from Trustpilot's own domain, and Trustpilot may set its own cookies inside that iframe, governed by Trustpilot's cookie policy. Those cookies are not set by us, and they cannot read anything about your DormantFile account.
How to manage your preferences
You can change your decision at any time using the Cookie preferences link in the footer of every page. It forgets your stored decision and shows the banner again, so you can make a new choice — withdrawing consent is the same one click as giving it. Clearing your browser's local storage for this site has the same effect.
You can also block or delete cookies through your browser settings. Be aware that blocking essential cookies may prevent you from signing in.
For more information about how we handle your data, see our privacy policy. For general guidance on cookies, visit the ICO's cookie guidance.