Signed-in sessions now last thirty days instead of seven, and renew daily while you keep using the product. Setting up a routine, checking a run trace mid-week, and coming back after a quiet stretch no longer means re-entering a password.
Nothing about the security model changed: cookies stay HTTP-only and same-site, signing out still ends the session immediately, and a revoked session is rejected on the next request. The lifetime is enforced from the session record on our side, not from the cookie alone.