| session_token | Keeps you signed in. Links your browser to your server-side session. | Until end of session | Essential |
| __Host-csrf_token | Protects forms against cross-site request forgery (security token). | Until end of session | Essential |
| verify_csrf_<flowId> | Binds an email verification flow to the browser that started it (protects against intercepted confirmation links). | 2 hours | Essential |
| magic_link_csrf_<flowId> | Binds a login-link sign-in to the browser that started it (protects against intercepted login links). | 2 hours | Essential |
| _oidc_session | Keeps you signed in across our websites and apps so you don't have to log in to each one separately. | 30 days | Essential |
| _oidc_interaction | Holds the state of your current sign-in flow while you go through it. | 30 minutes | Essential |
| _oidc_interaction_resume | Lets you continue where you left off after signing in or confirming your email. | 30 minutes | Essential |
