Essential cookies
These are always active because the site needs them for secure JWT login, cart persistence, checkout state, fraud-resistant forms, and admin access control.
Privacy controls
Deluxe uses a small, security-first cookie model. Essential cookies keep authentication, carts, checkout, CSRF protection, and admin access working safely.
These are always active because the site needs them for secure JWT login, cart persistence, checkout state, fraud-resistant forms, and admin access control.
These remember convenience preferences such as cookie choices and future storefront preferences. They are only used when accepted.
Analytics cookies are off by default. Meta Pixel only loads after analytics consent is granted and a Pixel ID is configured.
Authentication uses signed JWT cookies scoped to the site path, marked HttpOnly, protected with SameSite=Lax, rotated on login, and marked Secure automatically on HTTPS.