diff --git a/src/Bifrost.Web/Features/Heimdall/HeimdallAuthService.cs b/src/Bifrost.Web/Features/Heimdall/HeimdallAuthService.cs
index 1672c96..05e1ccf 100644
--- a/src/Bifrost.Web/Features/Heimdall/HeimdallAuthService.cs
+++ b/src/Bifrost.Web/Features/Heimdall/HeimdallAuthService.cs
@@ -420,14 +420,8 @@ public static class HeimdallAttemptCookie
     };
 
     /// <summary>
-    /// The options a deletion carries: the attempt cookie's Path, which a cookie is matched on, and no Max-Age,
-    /// which would take precedence over the expiry Delete writes and leave the emptied cookie alive.
+    /// The options a deletion carries: only the attempt cookie's Path, which a cookie is matched on. It carries no
+    /// Max-Age, which would take precedence over the expiry Delete writes and leave the emptied cookie alive.
     /// </summary>
-    public static CookieOptions DeleteOptions() => new()
-    {
-        HttpOnly = true,
-        Secure = true,
-        SameSite = SameSiteMode.Lax,
-        Path = "/auth/heimdall"
-    };
+    public static CookieOptions DeleteOptions() => new() { Path = "/auth/heimdall" };
 }