Cookies and tracking in RM Orbit
Effective 21 August 2026.
Orbit apps use only what is strictly necessary:
| Name or purpose | Type | Why | Lifetime |
|---|---|---|---|
| Session or token storage | Cookie or browser storage | Keep you signed in | Session, or up to the token lifetime set by your workspace |
| CSRF token | Cookie | Protect forms against cross-site requests | Session |
| Preferences | Browser storage | Remember theme, language, dismissed banners | Until cleared |
We set no advertising cookies, no third-party analytics, and no tracking pixels. Because only strictly necessary storage is used, no consent banner is shown. If that changes we will ask first where the law requires it. US visitors: we honour Global Privacy Control signals.
Drive data rooms log which viewer opened which file and when; viewers are told this on the entry page before they continue.