Legal
Cookie Policy
Effective 2026-05-19.
Resolute Security uses only the small number of first-party cookies listed below. All are "strictly necessary" — they exist to keep you signed in or to make a feature work. We do not use third-party advertising, analytics, or tracking cookies. There is no consent banner because there is nothing to consent to beyond what's required to operate the Service you signed up for.
Cookies we set
| Name | Purpose | Lifetime |
|---|---|---|
| session | Keeps you signed in. Required for every authenticated page. | 30 days |
| current_org_id | Remembers which organization you have active when you belong to several. | Session |
| impersonated_user_id | Set only when a platform admin uses the "View as" tool to debug a customer issue. Carries the target user's id; cleared when the admin ends the session. | 1 hour |
| pending_invite_token | Stores an unaccepted team-invite token while you sign in so we can complete the invite acceptance in one round-trip. | 10 minutes |
| oauth_state_* | CSRF protection for the OAuth sign-in flow with Google or Microsoft. Cleared as soon as you return from the provider. | 10 minutes |
What we don't use
- No advertising or marketing pixels.
- No third-party analytics (Google Analytics, etc.).
- No social-media tracking cookies.
- No cross-site tracking.
Managing cookies
You can clear cookies from your browser at any time. Doing so will sign you out of the Service. If you block our cookies entirely the Service cannot function — there's no unauthenticated state worth preserving.
See our Privacy Policy for the broader data-handling picture, and our Terms for the contractual basis.