diff --git a/functions/src/index.ts b/functions/src/index.ts
index a1d2c42..0f1d92b 100644
--- a/functions/src/index.ts
+++ b/functions/src/index.ts
@@ -22,15 +22,23 @@ admin.initializeApp({
 
 const sessionOption: SessionOptions = {
 	secret: secret.session,
+	name: "__session", // https://stackoverflow.com/a/44935288/12979111
 	resave: false,
 	saveUninitialized: false,
+	cookie: {
+		maxAge: 1000 * 60 * 60 * 24 * 7, // 1 week
+	},
 }
 
 const app = express()
 
 if (process.env.FUNCTIONS_EMULATOR !== "true") {
 	app.set("trust proxy", 1)
-	sessionOption.cookie = { secure: true }
+	sessionOption.cookie = {
+		...sessionOption.cookie,
+		sameSite: "none",
+		secure: true,
+	}
 }
 
 app.use(
diff --git a/functions/src/routes/dataRoutes.ts b/functions/src/routes/dataRoutes.ts
index 3a4705a..cf989aa 100644
--- a/functions/src/routes/dataRoutes.ts
+++ b/functions/src/routes/dataRoutes.ts
@@ -16,6 +16,8 @@ export default (app: Express): void => {
 		config.pathPrefix + "/user-data",
 		checkIfLoggedIn,
 		async (req, res) => {
+			res.setHeader("Cache-Control", "private")
+
 			req.user
 				? res.status(200).send(req.user)
 				: res.status(500).send("Failed to get user")