Advertising cookies
The Lucion Identity source does not install advertising cookies or third-party advertising trackers.
COOKIES & STORAGE
Identity storage stays separated by purpose.
Lucion Identity does not persist identity, credentials, permissions, or recovery data in client storage. Authentication uses secure server-backed cookies and hash-only server session records.
Analytics cookies
No analytics-cookie integration is included in this release. Any future analytics addition requires a privacy and consent review first.
Client-side persistence
This release does not use localStorage or sessionStorage for identity state, credentials, permissions, recovery material, or session tokens.
Authentication sessions
Lucion Identity uses a Secure + HttpOnly __Host-lid_session cookie resolved only through its server-side SHA-256 token hash. A separate SameSite=Strict anti-CSRF cookie protects authenticated mutations and is not an authentication bearer credential.