Cookies & local storage

The account flow uses first-party, HttpOnly cookies for browser-bound form protection and an account sign-in session (up to 8 hours). Cookies are Secure on HTTPS and SameSite=Lax. The existing workspace may also use browser-local preferences and explicitly enabled connections. No advertising trackers or marketing cookies are introduced by this account layer.

These cookies serve access and security. If analytics or marketing technology is introduced later, its consent requirements must be assessed before activation.