Draft — not yet reviewed by a lawyer

Cookies

Version 2026-10-draft, effective 21 October 2026

Fyling uses no analytics cookies and no advertising cookies, and nothing on this site tracks you across other sites. The cookies below are all strictly necessary: the service cannot work without them, so there is no cookie banner to accept.

What we set

• better-auth.session_token

  Keeps a member of a practice signed in to the Fyling app.

  Lasts: Up to 7 days, ended sooner if you sign out. Strictly necessary.

• fylng_active_org

  Remembers which practice you are working in, if you belong to more than one.

  Lasts: 1 year. Strictly necessary.

• fylng_2fa

  Marks that you have completed two-step sign-in on this browser, so you are not asked again straight away.

  Lasts: 30 days. Strictly necessary.

• fylng_hmrc_state

  Protects the step where a practice connects its HMRC account, by checking the reply came from the request you made.

  Lasts: 15 minutes. Strictly necessary.

• fylng_integrations_state

  The same protection when a practice connects an accounting package.

  Lasts: 15 minutes. Strictly necessary.

• fylng_portal_session

  Keeps a client signed in to their practice's client portal. It is separate from the staff app's cookie.

  Lasts: Up to 30 days, ended sooner if the client signs out. Strictly necessary.

If this changes

If we later add a tool that counts visits, we will update this page first, and ask for your consent before setting any cookie that is not strictly necessary.