Cookies

RushGrade uses necessary cookies for signed-in sessions, OAuth state, and security. These cookies are needed for account functionality and are not used to build advertising profiles.

Session cookie

The RushGrade session cookie is HttpOnly, Secure in production, and SameSite=Lax. It allows the site to recognize a signed-in account.

OAuth state cookie

A short-lived state value can be used during Google OAuth sign-in to protect the authorization flow.

Future analytics

If non-essential analytics or advertising technologies are added later, this policy and any required consent controls should be updated before deployment.