Account authentication
ase_access contains the short-lived account access token. ase_refresh allows the server to refresh your session. Both are HttpOnly, use SameSite protection and are Secure in production. They are not readable by normal frontend JavaScript.
Admin verification
ase_admin is a signed, short-lived verification cookie for the admin area. It expires after 30 minutes and is bound to the authenticated administrator. It does not contain the admin password.
Operational activity
ase_visitor is a signed random identifier, valid for 30 days, used to group previews and checkout activity. It contains no email, password or payment details. Signing in links activity from this browser to your account.
Optional tracking
We use Vercel Web Analytics to measure page visits, referring websites and aggregate device and country information without analytics cookies. We do not send artwork, email addresses, account identifiers or payment details to this analytics service. We do not install advertising cookies. Our hosting and payment providers may use their own cookies on their domains, including when you visit PayPal checkout.
Your controls
You can sign out to clear application authentication cookies or remove cookies through your browser settings. Blocking essential cookies prevents login and private account features from working.
Contact us with questions about this page.