Cookie Policy

1. Strictly Necessary Cookies

These are required for the service to function and cannot be switched off while using your account.

• Authentication session cookies — keep you signed in to your dashboard and are set by our authentication provider when you log in.
• Security (CSRF) cookie — protects authenticated requests against cross-site request forgery.

2. Referral Attribution

If you arrive through a partner or creator referral link, we set a first-party cookie (rm_referral) for 30 days so the referring partner is credited if you sign up. It contains only the referral code — no browsing history and no third-party sharing. If you don't visit via a referral link, this cookie is never set.

3. Analytics

We use PostHog (EU-hosted) to understand product usage.

For visitors who are not signed in, analytics runs in cookieless mode: no cookie or localStorage identifier is stored on your device, and events are not linked to a persistent profile.

After you create an account or sign in, analytics uses first-party storage (cookie/localStorage) linked to your account so we can understand product usage across sessions. This processing is described in our Privacy Policy.

4. Payments

Checkout and subscription management happen on our payment processor's pages, which set their own cookies under their own policies. Card details never touch Risk Marshal servers.

5. Managing Cookies

You can clear or block cookies in your browser settings at any time. Blocking or deleting the strictly necessary cookies will sign you out and may prevent the dashboard from working.

6. Changes and Contact

If our use of cookies changes materially, we will update this page and revise the date above.

Questions: support@riskmarshal.com