Cookies
Last updated October 8, 2026
TurnMyRental uses one cookie. It keeps you signed in. We do not use advertising scripts or tracking pixels, and nothing we set follows you to other sites.
| Cookie | Purpose | Expires |
|---|---|---|
tmr_sessionStrictly necessary |
Keeps you signed in after you click your login link. Without it every page would ask you to log in again. | Expires when the session does, or immediately when you log out. |
We also keep a single flag in your browser (not a cookie) to remember that you dismissed the notice at the bottom of the page, so it does not reappear on every visit. Clearing your site data removes it.
If you arrived from one of our links
When we post or advertise, our own links carry tags saying which post or ad they came from. If you arrive on one, your browser holds those tags for the rest of the visit and, only if you then create an account or ask for our checklist, saves them with your signup or your request so we can tell which post actually reaches hosts.
It is kept in your browser's session storage, not a cookie, and it disappears when you close the tab. If you came here directly, nothing is stored at all.
One exception, for Facebook and Instagram ads. When you click one of our ads there, Meta adds its own click ID to the link. If you then create an account during that visit, our server tells Meta that the click led to a signup, sending that click ID, the time, your browser's user agent (which names your browser and operating system) and an internal reference number for the signup. That is all: not your email, name, phone number or IP address. It lets Meta count which ads work. Nothing runs in your browser to do this and no cookie is involved.
There is one more case, and it involves your address. If you ask us for the turnover checklist, we may give Meta a scrambled (SHA-256) copy of your email address, so Meta can show our ads to people like you. A scrambled copy does not show your address, but Meta can match it to an account that uses the same address. If you arrived on our website from one of our ads on Facebook or Instagram and ask during that visit, our server sends it when you ask, together with Meta's click ID, the time, your browser's user agent and an internal reference number for your request. Whichever way you reached the checklist, including through a form on Facebook or Instagram, we may also add it to a list of scrambled addresses we give Meta, with a scrambled copy of your first name if you gave one. The checklist form on our website says so at the point you type your address in. If you unsubscribe, we leave you out of every list we prepare afterwards. A list we already gave Meta stays in our Meta ad account until we delete it.
If you never ask for the checklist and did not arrive from a Meta ad, Meta is sent nothing about you. No other site, Google included, is sent anything about your visit, with one exception: if you create an account, we email ourselves a note of it, which says how you found us, and Google hosts our email inbox.
How we count visitors
We count visitors on our own server, not with a cookie or a script. When a page loads, your IP address and browser type are mixed with a random value that changes every day, and only the scrambled result is kept. Your IP address is not saved with the count. The daily value is deleted the next day and is never copied into our backups, so after that the result cannot be traced back to you or linked to any other day's visit. The only other copy is in our database provider's 30 day recovery history, which we use only to recover from a fault. It tells us "about 40 people came today", not who they were.
Why there is no "reject" button
The session cookie is what signing in is. Refusing it would mean refusing to log in, so a button offering that choice would not be honouring a preference. It would be pretending to. Cookies that are strictly necessary to deliver a service you asked for do not require prior consent; they require telling you about them, which is what this page does. If we ever add anything non-essential, it will be off until you turn it on.
Clearing it
Logging out deletes it immediately. Your browser's site-data controls will also clear it, and you will simply be asked to sign in again.
The app also keeps copies of pages you open in your browser's cache, so that it can show something when you are offline. Logging out does not clear this cache, but your browser's site-data controls do.
What the cleaner's page uses
Your cleaner's checklist link sets no cookies at all. The link itself is the credential. Their browser may store a small amount of data locally to keep a half-finished checklist from being lost on a bad signal; that never leaves the device.