Cookie Policy - Montessori Notes

Detailed Cookie Inventory

Cookie Name	Purpose	Type	Duration	Provider
next-auth.session-token	Maintains your login session and authenticates your requests to the server. Required for security.	Essential	30 days or until logout	NextAuth.js (First-party)
next-auth.csrf-token	Protects against Cross-Site Request Forgery (CSRF) attacks. Security measure.	Essential	Session (deleted when you close browser)	NextAuth.js (First-party)
next-auth.callback-url	Remembers which page you were trying to access before login, so we can redirect you there after authentication.	Essential	Session (deleted when you close browser)	NextAuth.js (First-party)

Cookie Name	Purpose	Type	Duration	Provider
__stripe_sid	Used by Stripe payment processor to prevent fraud during checkout. Only set when you upgrade to Premium.	Functional	30 minutes	Stripe (Third-party)
__stripe_mid	Used by Stripe to detect and prevent fraudulent payment activity.	Functional	1 year	Stripe (Third-party)

Note: Stripe cookies will only be set if you choose to upgrade to Premium. They are necessary for secure payment processing and fraud prevention.