diff --git a/polylan_submitter/src/queries.ts b/polylan_submitter/src/queries.ts
index 487c16e..ae00d1a 100644
--- a/polylan_submitter/src/queries.ts
+++ b/polylan_submitter/src/queries.ts
@@ -12,11 +12,11 @@ import {
 // fetchQuery() through the same cache.
 export const queryClient = new QueryClient();
 
-// Login/logout are full-page redirects, so the user can't change within a
-// page load - only refetched once after a reload (see restoreQueryCache).
+// Login/logout are full-page redirects, but roles/scopes can still change
+// server-side, so don't keep the user forever.
 export const userQuery = () => ({
   ...polylanSubmitterApiGetUserInfoOptions(),
-  staleTime: Infinity,
+  staleTime: 5 * 60 * 1000,
 });
 
 // Games only change when staff enable/disable one, a few minutes of