1. Cookies and similar technologies
The current application code does not set browser cookies and does not include analytics, advertising or session-replay trackers. It does use browser storage described below. We will update this notice before adding optional tracking or similar technology. The live website and any third-party scripts must still be checked before this statement is treated as confirmed for the deployed service.
2. Essential session storage
VatRail stores access and refresh tokens in your browser's session storage so the app can authenticate requests. Session storage is isolated to the browser tab and is cleared when that tab session ends. If you clear browser data or close the session, you may need to sign in again.
3. Essential local storage
- HMRC device identifier: a random identifier stored in local storage when a relevant HMRC workflow needs it. It supports the HMRC fraud-prevention information required by that workflow. Clearing it causes a replacement to be created when next needed.
- Storage preference: the choice you make in the storage banner is saved in local storage so the banner does not appear every time you visit. It remains until you clear the site's local storage.
These items support requested account and HMRC functions or remember your privacy choice. Blocking or clearing them may require you to sign in again, recreate the HMRC device identifier, or choose again in the banner.
4. Optional storage and your choice
The banner currently offers “Use essential only” because no optional analytics, advertising or similar service is configured. Selecting it dismisses the notice and saves that choice. There is no optional-storage choice to make at present. If we introduce an optional service, we will identify it and provide a separate choice before it is used.
To show the notice again, clear VatRail's local storage in your browser settings. This also clears the HMRC device identifier, which will be recreated if a relevant workflow needs it. Your browser help pages explain how to clear site storage.
5. Changes
If we add a cookie or other optional browser technology, we will update this policy to describe its provider, purpose, information used, duration and any relevant data transfer. We will keep it off until you have made the required choice.