Secure WAC session — necessarywac_session keeps you signed in and preserves encrypted session state. XSRF-TOKEN protects forms and account actions against forged requests. Neither is used for advertising or analytics.
Cookie choices and remembered sign-in — necessaryremember_web_* is created only when “Remember me” is selected. wac_cookie_consent_v2 (reported by some scanners as CookieConsent) stores this choice for one year. laravel_maintenance is used only for authorised maintenance access.
Encrypted realtime connection — necessary browser storagepusherTransportTLS remembers that dashboard and message updates must use an encrypted TLS connection. It is local browser storage, contains no message content and is not used to track visitors.
Stripe payment securityOn pages containing Stripe payment tools, Stripe may set m, __stripe_mid and __stripe_sid to prevent fraud and process card payments securely.