Cookies and browser storage
MyRentAll keeps only what the site needs to work. There are no advertising cookies, and no third-party tracking scripts are loaded. This page lists everything, read from our code.
Cookies
Set by our servers to keep you signed in and your account safe. Your browser sends them back to us. Page scripts cannot read them. In production their names start with __Secure-.
| Name | What it is for | When | How long |
|---|---|---|---|
| better-auth.session_token | Keeps you signed in. | When you sign in. | Until you sign out or the session ends. |
| better-auth.two_factor | Remembers that you are halfway through two-step sign-in. | Only during two-step sign-in. | A few minutes. |
| better-auth-passkey | Holds the one-time challenge while you add or use a passkey. | Only while you add or use a passkey. | A few minutes. |
| better-auth.oauth_state | Checks that a Google or Apple sign-in came back to the same browser that started it. | Only when you sign in with Google or Apple, if that is switched on. | A few minutes. |
| mra_device | A random id for this browser, so we can email you when your account is signed in on a new device. It is not used for advertising or to follow you around the web. | When you sign in. | 400 days. |
Kept on this device
Stored in your browser (local storage). It stays on this device and is never sent to us.
| Name | What it is for | When | How long |
|---|---|---|---|
| myrentall.recentlyViewed.v1 | The last 12 listings you looked at (title, suburb, rent and a photo link), for "Recently viewed". | When you open a listing. | Until you clear your browser data. |
| myrentall.activeRole.v1 | Whether you last used the landlord or the renter dashboard, if you have both. | When you switch dashboards. | Until you clear your browser data. |
| two_step_banner_dismissed | That you hid the reminder to turn on two-step sign-in. | When you hide the reminder. | One day. |
| myrentall.analyticsConsent.v1 | Your answer about analytics. | Only if analytics are configured and you answer. | Until you clear your browser data or change your answer here. |
| myrentall.appearance.v1 | Whether you chose the light look, the dark look, or to follow your device. | When you choose an appearance. | Until you clear your browser data or change it under Settings. |
| myrentall.sidebar.v1 | Whether you collapsed the sidebar to icons. | When you collapse or expand the sidebar. | Until you clear your browser data or open it again. |
| myrentall.listingDraft.v1 | A listing you started but have not saved yet (the address, details and rent), so closing the tab loses nothing. | Landlords only, while creating a listing. | Until the draft is saved to your account, or you clear your browser data. |
| myrentall.passkeyNudge.v1 | That we have already offered to add a passkey on this device, whether you added one or said not now, so we do not keep asking. | After you sign in with a password on a device that supports passkeys. | Until you clear your browser data. |
| myrentall.admin.views.v1.* | For MyRentAll staff only: the names and filters of the saved views on the admin tables. | Only for staff, when they save a view. | Until you clear your browser data or forget a view. |
Kept until you close the tab
Stored in your browser for the open tab only (session storage). Signing out clears it.
| Name | What it is for | When | How long |
|---|---|---|---|
| pending_verification_email | The email address you just used, to show on the "check your email" page. | When you sign up, or sign in before confirming your email. | Until you close the tab. |
| tenancy-invitation-token | The invitation code from your link, so it survives a page reload. | When you open a tenancy invitation link. | Until you close the tab. |
| trade-job-token | The job code from a tradesperson’s link, so it survives a page reload. | When a tradesperson opens a job link. | Until you close the tab. |
| mra_support_view | For MyRentAll support staff only: which account they are viewing, read-only, with the person’s agreement. | Only for support staff. | Until the tab is closed or the view ends. |
Other services
- Payments. When you open a payment form, Stripe’s script loads from Stripe so your card details go straight to Stripe and never through our servers. Stripe may set its own cookies (such as
__stripe_midand__stripe_sid) to prevent fraud. Their use is covered by Stripe’s privacy policy. - Error reports. If something breaks, technical details of the error may be sent to our error-tracking service so we can fix it. It sets no cookies.
- Maps. The maps on MyRentAll are Google maps. A listing’s map, and the search map when you open map view, load from Google, so Google receives your network address and the area shown, and may set its own cookies. Their use is covered by the Google Privacy Policy.
- Listing views. When you open a listing we count the view for its landlord. We do not keep your address or device details: they are scrambled with a code that changes every day and is then thrown away, and only the number of views is kept.
Analytics
Analytics are switched off on this site. No analytics script is loaded.
You can clear all of this at any time in your browser’s settings. Signing out removes the sign-in cookies. Read our privacy policy for how we handle personal information.