| Session cookie (__Host-session) | Keeps you signed in, however you signed in. Page scripts cannot read it | Until you sign out, or the session expires |
| Recovery cookie (__Host-recovery) | Ties an account recovery you started to this browser during the waiting period | Until the recovery finishes, is cancelled or expires |
| Google and Apple sign-in cookies (__Host-google, __Host-apple) | Ties a Google or Apple sign-in you started to this browser | A few minutes |
| Security cookie (at launch) | Protects forms against cross-site request forgery | Session |
| Preference cookies (theme, locale, currency, sidebar) | Your theme, language, display currency and sidebar width, so pages load in the right form | One year |
| Signed-in hint cookie (demo_session) | Lets the server draw the signed-in header on the first load. It holds no identity | Until you sign out or the session ends |
| Recovery progress (local storage, croleo.recovery) | The email address and waiting-period end time of a recovery you started on this browser | Removed after the recovery window, at most 8 days |
| Account settings (local storage, account-settings-v1) | Preferences and the security, API key, identity-check and support-ticket previews kept in this browser during the public beta. Balances and orders are kept by the exchange, not here | Until you clear it |
| Favourite markets (local storage) | Pairs you starred on the markets page | Until you clear it |
| Layout and notices (local storage) | Trading screen panel sizes and layout, and which notifications you have read | Until you clear it |
| Google availability (session storage, croleo.googleAvailable) | Whether Continue with Google is switched on, so the button does not flicker | Until you close the tab |