Essential cookies
These are always active because the site needs them for secure JWT login, cart persistence, checkout state, fraud-resistant forms, and admin access control.
Privacy controls
Cookie policy
Deluxe uses a small, security-first cookie model. Essential cookies keep authentication, carts, checkout, CSRF protection, and admin access working safely.
Essential always on
Optional cookies need consent
Secure cookie defaults
Functional cookies
These remember convenience preferences such as cookie choices and future storefront preferences. They are only used when accepted.
Analytics cookies
Analytics cookies are off by default. Meta Pixel only loads after analytics consent is granted and a Pixel ID is configured.
Security standards
Authentication uses signed JWT cookies scoped to the site path, marked HttpOnly, protected with SameSite=Lax, rotated on login, and marked Secure automatically on HTTPS.