Cookie Policy
Effective 9 June 2026 · Last updated 9 June 2026
This Cookie Policy explains how Philofounder, a service operated by GRANDPOINT LTD (Companies House number 16498233, registered office 108 St. Helens Street, Ipswich, IP4 2LB, ICO registration ZC084167), uses cookies and similar technologies. For data protection enquiries, contact our Data Protection Officer at privacy@grandpoint.uk.
What are cookies
Cookies are small text files placed on your device when you visit a website. They let a site work properly, keep you signed in, and stay secure.
The cookies we use
Philofounder uses strictly necessary cookies only. They are essential for functions you ask for (signing in and connecting accounts), so no consent banner is required. We do not use advertising or tracking cookies, and we do not sell your data.
- Authentication and session. Keep you securely signed in after you use your single-use sign-in link. Purpose: sign-in and security. Duration: session to a few weeks.
- Connection security (h_oauth_state). A short-lived cookie that protects the account-connection flow against cross-site request forgery. Purpose: security. Duration: a few minutes.
- HMRC fraud prevention (hmrc_did, hmrc_fp). When you connect HMRC, these hold a device identifier and device characteristics that HMRC requires us to send with every Making Tax Digital request as anti-fraud headers. Purpose: meeting HMRC’s mandatory fraud-prevention rules. Duration: up to 30 days (device characteristics) and up to 1 year (device identifier).
Third-party cookies
When you connect an external account (Google, Microsoft, your bank via Open Banking, or HMRC), that provider may set its own cookies on its own sign-in pages during authorisation. Those cookies are governed by the provider’s own cookie and privacy policies, not this one.
Managing cookies
You can view, delete, or block cookies through your browser settings (for example, in Chrome: Settings → Privacy and security → Cookies and other site data). Because our cookies are strictly necessary, blocking them will stop you from signing in or connecting accounts.
Your rights and contact
Your rights over the data we process are set out in our Privacy Policy, and you can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint (telephone 0303 123 1113). Questions about cookies? Email privacy@grandpoint.uk.
Changes
We may update this Cookie Policy to reflect changes in our practices or the law. We will post the updated version here with a new effective date.