RISOS Cookie & Session Technologies Policy

1. Current approach

RISOS currently uses cookies and similar session technologies primarily for functions that are necessary to provide requested service features, including authentication, session continuity, access security, and anonymous research previews. The current production code baseline does not deploy a third-party advertising-cookie layer or a cross-site behavioral advertising SDK.

2. Strictly necessary technologies

Authentication and session cookies. RISOS uses Supabase-backed authentication/session technology to keep signed-in users authenticated and to support secure account and workspace access. Exact cookie names and lifetimes may be managed by the authentication service and can change as the authentication implementation evolves.

Anonymous research session. RISOS may set a risos_anon cookie for an anonymous research-preview session. The current maximum age is 24 hours. It is used to isolate and associate the permitted anonymous preview flow and is not an advertising identifier.

Access-gate token. Where an access gate is enabled, RISOS may use a signed risos_access token to maintain authorized access. The current maximum age is 12 hours. This technology is for access control and is not used for advertising.

3. Preferences and functionality

RISOS may use browser storage or equivalent first-party functionality when needed to remember user-interface or workspace preferences. If a preference technology is not necessary and applicable law requires consent before use, RISOS will apply the required control before activating it.

4. Analytics and performance

RISOS processes server-side request, performance, diagnostic, model-usage, and security telemetry as described in the Privacy Policy. This policy does not characterize ordinary server logs or necessary security telemetry as advertising cookies. If RISOS later introduces a non-essential browser analytics SDK or tracking tag, the deployed technology and any required consent control must be reviewed before activation.

5. Advertising and cross-context tracking

RISOS does not currently use cookies to build cross-site advertising audiences, serve behaviorally targeted ads, or retarget users across unrelated services. If that practice changes, RISOS will update the Privacy Policy, this policy, and any required opt-out or consent mechanism before relying on the new practice.

6. Browser controls

Most browsers allow you to block or delete cookies. Blocking necessary authentication or session technologies may prevent sign-in, anonymous previews, security controls, or other requested functionality from working correctly.

7. Changes

We may update this policy when authentication, browser storage, analytics, advertising, or consent technologies change. Material changes will receive any notice or consent required by applicable law.

8. Contact

Questions about cookies, sessions, or tracking technologies can be sent to hello@risos.co.