Cookies and browser storage

The store uses HttpOnly, same-site cookies for authentication and short-lived signed order or manager access. These are necessary to protect customer information and cannot be replaced by advertising cookies.

Checkout fields may be kept in session storage for up to 30 minutes so a cancelled Stripe Checkout can be resumed. The seat-manager walkthrough preference may be stored locally. Checkout drafts are cleared after successful return.

Stripe Checkout and Billing Portal may set their own security and payment cookies under Stripe's policies. Links to MarkBook and support destinations are governed by those sites once opened.

Production analytics must not receive bearer tokens, Stripe session IDs, emails, order-access URLs, setup links, or download links. If non-essential analytics or advertising cookies are introduced later, consent controls and this notice must be updated first.