Secure WAC session — necessarywac_session keeps you signed in and preserves encrypted session state. XSRF-TOKEN protects forms and account actions against forged requests. These cookies support security and requested account features. Guest usage counts do not use the session cookie.
Remembered sign-in and maintenance accessremember_web_* is created only when “Remember me” is selected. WAC no longer saves a cookie-panel preference; an older wac_cookie_consent_v2 value is removed. laravel_maintenance is used only for authorised maintenance access.
Directory shortlist — requested tab session storagewac-directory-shortlist-v1 stores only the IDs of up to four profiles you choose to shortlist. It is session storage in this tab, not a cookie, and is created when you save a profile. “Clear shortlist” removes it immediately. It normally ends when the tab closes; a browser’s restore-session feature may restore it. Opening a comparison includes the chosen profile IDs in the page address so WAC can display those profiles. We do not use this storage for advertising.
Display settings — no saved preferenceWAC uses one light interface and removes the retired flux.appearance entry. It does not save a new display preference.
Encrypted realtime connection — necessary browser storagepusherTransportTLS remembers that dashboard and message updates must use an encrypted TLS connection. It is local browser storage, contains no message content and is not used to track visitors.
Stripe payment securityOn pages containing Stripe payment tools, Stripe may set m, __stripe_mid and __stripe_sid to prevent fraud and process card payments securely.
