Cookie Policy
Last updated August 16, 2026
This policy explains what cookies Rayz Security sets in your browser and why. It's short, because our actual cookie use is short: we use cookies to keep you signed in, and nothing else.
Strictly necessary cookies
These cookies are what keep you logged in as you move between pages. The Service can't function without them, so there's no opt-out for these specifically — declining them means declining to use the Service, the same as declining to enter a password.
| Cookie | Purpose | Duration |
|---|---|---|
sc_access | Short-lived session token that authenticates your requests while you're signed in. | 30 minutes |
sc_refresh | Used to issue a new session token without asking you to sign in again. | 14 days |
sc_step | Remembers where you are in the onboarding flow so you can pick up where you left off. | 14 days |
All three are set as HttpOnly (not readable by page scripts) and SameSite=Lax, and as Secure (HTTPS-only) in production.
What we don't use
We don't currently set analytics, advertising, or third-party tracking cookies. If that changes as the product grows, we'll update this page and this section first — we're not going to let this policy quietly go stale while our actual cookie use expands behind it.
Third-party cookies
If you connect an integration like Jira, the authorization flow briefly takes you to that provider's own site, which may set its own cookies under its own policy — those are outside our control once you leave our domain for that step.
Controlling cookies
Most browsers let you block or delete cookies through their settings. Because our only cookies are the ones that keep you signed in, blocking them will sign you out and prevent you from staying signed in to the Service — there's no partial mode where you keep functionality without them.
Changes to this policy
We'll update the "Last updated" date above whenever this policy changes, and describe the change here if it affects what we actually collect.
Contact
Questions about this policy? Reach us at privacy@rayz-security.com.