Cookie notice | S5 Respons

Necessary cookies only

S5 Respons uses a session-only HttpOnly access cookie with a four-hour inactivity timeout and twelve-hour absolute lifetime. If the user explicitly selects “Remember this device”, a separate rotating, server-revocable HttpOnly device cookie has a fourteen-day inactivity timeout and thirty-day absolute lifetime. Both are Secure in production; access uses SameSite=Lax and the remembered device uses SameSite=Strict. Short-lived PKCE cookies protect Google and Microsoft connections. No analytics, advertising or support cookies, and no application use of localStorage or sessionStorage, were found. A consent banner is therefore not shown.

Control

Logging out revokes the active server session and remembered device. A user can also revoke trusted devices from the security page. Deleting necessary cookies in the browser signs the user out or interrupts the selected provider connection.