Legal
Cookie Policy
Last updated · May 2026
1. What we use
Strictly necessary cookies (session, CSRF), and product analytics cookies (opt-in, EU/UK).
2. What we don’t use
No ad-tech, no cross-site tracking, no fingerprinting. We don’t embed Facebook, LinkedIn, or X pixels.
3. Cookie list
rf_session — auth session; rf_csrf — CSRF token; rf_consent — your cookie preferences. That's it on marketing pages. In-product, we add cookies for workspace state.
4. Managing preferences
You can opt out of analytics cookies at any time via the banner or Settings → Privacy.