Skip to main content
Sign in
Menu
Enter your code
Last updated · Last reviewed

Cookies

Golden Ledger uses the cookies and browser storage it needs to work. Analytics and advertising cookies are used only if you allow them, and you can change your mind at any time.

In short

  • Six cookies that Golden Ledger needs, set by Golden Ledger itself, for signing in or for remembering a choice you made.
  • Google Analytics and advertising cookies only if you allow them in the cookie banner. Reject them and everything still works.
  • We never share your answers, documents or building details with analytics or advertisers.
  • Two items of storage on your device, written only when you change a display setting or type a reply.
  • Change your choice at any time with Cookie settings, at the foot of every page of Golden Ledger or below.
On this page

Cookies Golden Ledger needs

A cookie is a small file a website stores in your browser. These cookies are all first party (set by goldenledger.co.uk). Only gl_consent can be read by scripts on the page, so the page knows your cookie choice.

Every cookie Golden Ledger sets, checked on 26 October 2026
CookieWhen it is setWhat it is forHow long it lasts
wos-auth-verifierWhen you start signing in, or open a page that needs you to be signed inHolds an encrypted, single-use value that protects the sign-in step against forgery. It is not used to recognise you or follow you around the site.10 minutes; deleted when sign-in finishes
wos-sessionWhen you sign inKeeps you signed in. Its contents are encrypted.Up to 400 days, or until you sign out
gl_auth_restartOnly if signing in fails part wayLets Golden Ledger restart sign-in once, rather than show an error.2 minutes
gl_agent_companyWhen you choose which company to work for, if you can act for more than oneRemembers that company. It is checked against what you may see on every page, so it never grants access.1 year
gl_consentWhen you answer the cookie question at the top of the pageRemembers whether you accepted or rejected analytics and advertising cookies, so we do not ask on every page. It holds only your answer.6 months, then we ask again
gl_admin_councilMatchKey staff only, when they choose a councilRemembers which council a MatchKey staff member is viewing.1 year

The two cookies whose names start with wos- are set by WorkOS, the software that runs sign-in for us, under our own web address.

Storage on your device

Browser storage works like a cookie but is never sent to us: it stays on your device and only the page itself can read it.

Browser storage Golden Ledger uses
NameWhen it is writtenWhat it is forHow long it lasts
gl-displayOnly when you change a Display settingRemembers your display settings (text size, spacing, contrast, motion) on this device.Until you clear it
gl:follow-up-response:…Signed in, while you type a reply to a council questionKeeps the reply you are typing if the page reloads.Until you send or clear the reply

The website's typefaces are served from Golden Ledger itself, so opening a page contacts no font service.

When we ask for consent

The law asks a website for consent before it stores anything on your device or reads it from there, unless the storage is strictly necessary to provide a service you asked for (Privacy and Electronic Communications (EC Directive) Regulations 2003, regulation 6 and Schedule A1, paragraph 4, as amended by the Data (Use and Access) Act 2025 and in force since 5 February 2026). The cookies Golden Ledger needs are for signing in, keeping sign-in secure or remembering a choice you made, so we do not ask about them. Analytics and advertising cookies are not needed for the service, so we ask first, and nothing from Google Analytics loads until you say yes. Our lawful basis for the information they collect is your consent (UK GDPR Article 6(1)(a)).

When is the sign-in cookie set?

Only when you start signing in, or when you open a page that needs you to be signed in. Reading the public pages does not set it.

wos-auth-verifier holds a random code and the address of the page you were going to, encrypted so that only Golden Ledger can read it. It lets the sign-in step be checked when it comes back. It lasts 10 minutes and is deleted when sign-in finishes.

Clearing or blocking them

You can clear or block cookies and site storage in your browser settings at any time. If you do:

  • blocking wos-auth-verifier or wos-session stops you signing in;
  • clearing gl_agent_company means you choose your company again next time;
  • clearing gl-display puts your display settings back to the standard ones;
  • clearing a reply draft loses any reply you had not sent;
  • clearing gl_consent means we ask about analytics and advertising cookies again.

Reading the public pages works without any of them.

To change or withdraw your choice about analytics and advertising cookies, use Cookie settings at the foot of every page of Golden Ledger, or in the section above. Withdrawing does not affect what was collected before.

Questions

Ask us at privacy@goldenledger.co.uk. How we use personal information in general is in our privacy notice.