Essential cookies
These are always active because the site needs them for secure JWT login, cart persistence, checkout state, fraud-resistant forms, and admin access control.
Privacy
Cookie policy
Deluxe uses a small, security-first cookie model. Essential cookies keep token authentication, carts, checkout, CSRF protection, and admin access working safely.
Functional cookies
These remember convenience preferences such as cookie choices and future storefront preferences. They are only used when accepted.
Analytics cookies
Analytics cookies are off by default. If analytics are added later, they should only load after consent is granted.
Security standards
Authentication uses signed JWT cookies scoped to the site path, marked HttpOnly, protected with SameSite=Lax, rotated on login, and marked Secure automatically on HTTPS.