Cookie Policy
iHouse sets the cookies and local storage needed to make the site work and, only with your consent, the cookies Google uses to show advertising and to count visits. Nothing else.
Cookies we set
Strictly necessary — sign-in
authjs.session-token(or__Secure-authjs.session-token) — Auth.js session token; keeps you signed in. HttpOnly, SameSite=Lax,Secure. 30 days.authjs.csrf-token— CSRF protection for sign-in flows. HttpOnly. Session.authjs.callback-url— Remembers where to send you after sign-in. HttpOnly. Session.
Strictly necessary — preferences
NEXT_LOCALE— your selected language (en / zh). Lets us render in your language server-side so the page doesn't flash. SameSite=Lax. 1 year.
Strictly necessary — local storage (not a cookie)
ihouse:accent— your chosen accent colour (default orange). Stored in your browser's localStorage only — never sent to the server.
Advertising and analytics — with your consent
Property, browse and area pages carry ads from Google AdSense, and visits are counted with Google Analytics. Neither sets a cookie until you accept in the consent banner. If you decline, ads still show but are not personalised (no advertising cookie is set) and Analytics runs without cookies or identifiers.
- Google AdSense — set by Google and its advertising partners to select, personalise and measure ads (for example
__gads,__gpi,IDE). Only after consent. Third-party, up to 13 months. See Google's "How Google uses information from sites that use our services". - Google Analytics 4 —
_ga,_ga_*— distinguish visitors and sessions so we can count visits and see which pages are used. Only after consent. Up to 2 years.
We do not build cross-site profiles and we do not sell cookie data to anyone.
Managing cookies
You can change your advertising and analytics choices at any time — the button below (or "Privacy and cookie settings" at the very bottom of the page) reopens the consent settings. You can also delete or block cookies in your browser settings; disabling any of the strictly-necessary cookies above will break sign-in or your saved language preference.
Related: Privacy Policy.