Essential session cookies
Secure client access uses HttpOnly, SameSite-protected cookies for the browser form token, temporary verification challenge and authenticated session. Production cookies require HTTPS. Sessions expire after inactivity or the configured maximum duration.
WordPress and delivery systems
WordPress uses cookies for administrator access and may set password-reset or other essential cookies. Hosting, security, mail-delivery services or additional plugins may introduce their own processing. This package does not include advertising or analytics trackers.
Your controls
Browser controls can clear cookies or restrict their use. Blocking essential cookies prevents secure client sign-in. The operator should maintain an accurate inventory of additional services and their applicable consent requirements.