SchemeServe uses cookies and local storage to support core functionality such as authentication, user preferences, and site configuration.
A site setting, controlled by SchemeServe, controls whether the cookie notification banner is displayed to users.
What Cookies Does SchemeServe Use?
Following a review, SchemeServe only uses strictly necessary and functionality cookies.
Cookies
| Cookie | Purpose |
|---|---|
| ss_access | Access token for authentication |
| ss_access_exp | Access token expiry |
| ss_device | Device token for authentication and MFA |
| ss_messages | Tracks viewed system messages |
| ss_page_history | Stores last visited page for user convenience |
| ss_refresh | Refresh token for authentication |
Local Storage
| Key | Purpose |
|---|---|
| gbFeaturesCache | Feature flag cache |
| i18nextLng / i18next_res_* | Language and translations |
| ssCurrentCurrency | Selected accounting currency |
| ssManifest | Front-end module versions |
| ssSiteData / ss_site_data | Site configuration data |
| ssSiteSettings | Site settings |
| ssUserDefinedColumns_* | Custom accounting columns |
Key Point
All cookies in SchemeServe are essential and/or functionality-based
There are no third-party tracking cookies used by default
What Happens When the Cookie Bar is Disabled?
The setting:
- Controlled internally at SchemeServe
- Hides the cookie banner only
- Does not prevent cookies from being set
This behaviour is intentional, as the cookies in use are considered necessary for the operation of SchemeServe.
Implications of Hiding the Cookie Bar
If the banner is hidden:
- Cookies will still be placed on the user’s device
- As these are necessary/functionality cookies, this is generally acceptable
However:
If you operate your own cookie banner, you should include SchemeServe cookie information within your policy
Transparency obligations still apply, particularly for non-UK users
Compliance Responsibility
Compliance is shared:
SchemeServe
Ensures cookies used are appropriate and limited to necessary/functionality use
Customer (You)
Responsible for:
- Cookie policies
- User disclosures
- Compliance with local regulations
Regulatory Context
Under the Data Use and Access Act 2025 (DUAA):
Consent is no longer required in the UK for certain low-risk cookies, including:
- Functional cookies
- Personalisation cookies
- Statistical/analytical cookies
Despite this, SchemeServe continues to provide a cookie banner to support:
- International compliance
- Best practice transparency
.png)
