What is saved
When you submit, this demo server stores the sample district, property type, scope, timeframe, fictional name and example.com email. If attached, it also stores the original estimator inputs, synthetic rate version, itemised values, exclusions, currency, calculated range and UTC creation time. The receipt shows times in Europe/London.
Your browser session
Two host-only cookies support the demo: morrow_demo holds a random session token, and morrow_csrf protects form submissions. Both are HttpOnly and SameSite=Lax, last up to 24 hours and use Secure except during explicit loopback development. The database stores a hash of the session token, not the token itself.
This is a demo sandbox, not a customer account or production authentication. Anyone using the same browser session can access that session’s records. A receipt link does not grant another session access.
Expiry and clearing
Sessions expire 24 hours after creation. Reads and submissions enforce that deadline. Expired records are deleted in bounded batches on server startup and later mutations, so physical removal may happen after access expires.
“Clear my demo” on the enquiry or receipt page deletes your current sandbox and all its records, then removes its cookies. It does not reset shared sample rates or another visitor’s records. Open your demo controls.
Use sample information only
Use the supplied fictional persona or another invented name with an @example.com address. Other email domains are rejected. There are no phone, address, document, payment or upload fields. Do not enter real personal information.
Where data goes
The worksheet calculates in the browser and can also render a calculation on this server. Its inputs are carried in the page URL when you attach an estimate, so they may remain in browser history. An enquiry is saved in a local SQLite database on the demo server. No adviser or real business receives it. Request bodies and sample contact details are not written to application logs.
Images and fonts are served with this site. No analytics, advertising, external font requests, payment integration or newsletter service is included. Temporary local recovery-test copies are development evidence and are excluded from the public site.