Sesame

Cookie policy

Sesame uses security cookies only when you use an account action that needs them. It does not use analytics, advertising, or third-party tracking cookies.

Version 2026-09-14 · Updated 14 September 2026 · Part of our privacy policy

About cookies

Cookies are small files a website stores in your browser. Sesame uses only security and sign-in cookies that are necessary for an account action you request. Public product pages do not set them. Because there are no optional cookies, Sesame does not show a consent banner or save a cookie-banner preference.

Cookies we use

NamePurposeTypeDuration
sesame_csrfProtects a sign-in, registration, recovery, support, or account change request from cross-site request forgeryStrictly necessary, first-party, HttpOnlyUp to 1 hour
sesame_sessionKeeps you signed in to a website accountStrictly necessary, first-party, HttpOnlyUp to 30 days; cleared on sign out
sesame_wanBinds a temporary passkey ceremony to the browser that started itStrictly necessary, first-party, HttpOnlyUp to 10 minutes; cleared after use

These are first-party cookies. They are sent with Secure on HTTPS and use a restrictive same-site setting.

Managing cookies

You can delete or block these cookies in your browser settings. Doing so can prevent sign-in, passkey use, account changes, or support submissions from working, but it does not affect the desktop app or a local vault.

Version 2026-09-14 · Updated 14 September 2026.