Cookies we set

Cookie	Purpose	Lifetime
obelisk_session	Keeps you signed in (HttpOnly, SameSite=Lax, Secure). Carries your passkey-backed session.	As long as the session it carries, at most 30 days
obelisk_join	Temporarily remembers an organization invite while you sign in (HttpOnly, SameSite=Lax, Secure).	15 minutes
obelisk_social	Only when social sign-in is used: holds the signed state that ties the provider's reply to the sign-in you started (HttpOnly, SameSite=Lax, Secure).	10 minutes
obelisk_saml	Only when SAML sign-in is used: holds the signed id of the sign-in request your organization's identity provider is answering (HttpOnly, SameSite=None, Secure; SameSite=None because that answer arrives as a cross-site POST).	10 minutes

These are strictly necessary — the Service cannot keep you securely signed in without them, so they are exempt from consent requirements in most jurisdictions.

No tracking

We do not set advertising cookies, do not embed third-party trackers, and do not build cross-site profiles. Forms that need bot protection, such as sign-up and contact, load Cloudflare Turnstile, a bot check served by Cloudflare (see Privacy › Subprocessors). The brand favicon and mark are served from our own origin.

Controlling cookies

You can clear cookies in your browser at any time; doing so will sign you out. Signing out from your account clears the session cookie immediately.