Cookies
Cookie policy
Effective 2026-05-21
Draft — pending legal review
This page lists every cookie and similar technology belgraveestates.com uses, what each one does, how long it persists, and how to control it. Change your preferences any time via thein the footer.
1. What is a "cookie"
A cookie is a small text file your browser stores on behalf of a website. We also use localStorage, sessionStorage, and (for performance) the Cache API — these are governed by this policy too.
2. The four categories
Necessary (always on)
Cookies the site cannot function without. Cannot be disabled.
| Name | Purpose | Lifetime |
|---|---|---|
| belgrave_admin_session / _refresh | Operator session for the admin console | 15 min / 14 days |
| belgrave_brokers_session / _refresh | Broker portal session | 30 min / 12 hours |
| belgrave_public_session / _refresh | Public-site portal session | 15 min / 14 days |
| belgrave_*_device | Device-recognition (HMAC-signed, opaque) | 1 year |
| belgrave_*_mfa_at | Step-up MFA freshness marker | 30 min |
| BE_COOKIE_CONSENT | Records your own consent choices on this page | 1 year |
Functional
Remember preferences you have chosen. Off by default; enable to opt in.
| Name | Purpose | Lifetime |
|---|---|---|
| be_theme | Light / dark / system mode | 1 year |
| be_locale | Preferred language & region | 1 year |
| be_currency | Display currency on listings | 1 year |
| be_units | Sqft vs sqm | 1 year |
Analytics
Tell us which pages get used so we can improve the site. Off by default. First-party only — no third-party trackers.
| Name | Purpose | Lifetime |
|---|---|---|
| be_visitor | Anonymous visitor id (resets each session) | Session |
| be_session | Session continuity for pageview attribution | 30 min idle |
Marketing
Off by default. Currently empty — we do not run third-party advertising trackers. If we add any in future, they will appear in this table before the script loads.
3. AI / MCP-related cookies
The AI concierge is stateless on the client. When you arrive on belgraveestates.com via an AI-issued deep link, a 15-minute signed prefill token is read from the URL and discarded — it is never stored as a cookie. Your subsequent session cookies (if any) are governed by the categories above.
4. Global Privacy Control
If your browser sends the Sec-GPC: 1 signal, we automatically reject Marketing cookies and ignore Analytics opt-in prompts. You can still manage Functional cookies via the.
5. How to control cookies
- Open the at any time. Changes apply immediately and persist on this browser.
- Clear cookies via your browser. You will get the banner again on the next visit.
- Use a privacy-focused browser, extension, or VPN. Belgrave does not penalise such users — accessibility under privacy tools is treated as a feature, not abuse.