We use the smallest number of cookies we can get away with. No third-party advertising trackers, no marketing beacons.
Strictly necessary
admin_session— JWT, HttpOnly, 7-day sliding window. Authenticates brand admins.entrant_session— JWT, HttpOnly, 30-day. Authenticates entrants who choose to log in.
Stripe / Shopify
During checkout and Shopify-side flows, those providers set their own cookies under their domains. Their cookie policies apply.
Opt-out
We don't set any non-essential cookies, so there's nothing to opt out of on our domain. If you block all cookies, you won't be able to log in.