Our application sets or reads these first-party cookies (names match code in the repository):
Session (`chat_agent_session`): keeps you signed in; HttpOnly; tied to your account session lifetime.
Auth state (`chat_agent_auth`): signed cookie used with auth routing and security checks; HttpOnly.
Google OAuth (`chat_agent_google_oauth`): short-lived cookie during Google sign-in handoff; cleared when the flow completes.
Locale (`locale`): stores your selected UI language (client-readable; long-lived).
Theme (`theme`): stores light/dark preference for the interface (client-readable; long-lived).
UTM session (`chat_agent_utm_session`): ties anonymous visits to campaign parameters for attribution; HttpOnly; rolling expiry (see server configuration).
Guest limit (`chat-agent:guest-used`): set when a signed-out visitor uses the one-time guest message allowance; HttpOnly on applicable responses.
Session cookies expire when you sign out or when the session ends; preference cookies persist until you clear them or they expire.