1. Strictly-necessary cookies
These cookies are required to operate the platform and cannot be disabled without breaking the site:
- gth.access_token, gth.refresh_token (localStorage) — JWT access & refresh tokens for authenticated sessions. Lifetime: access 15 min, refresh 30 days.
- exim.session (HTTP-only cookie) — server-side session marker used by middleware. Lifetime: until logout.
- gth-theme (localStorage) — your theme preference (light / dark). Lifetime: persistent until cleared.
- gth-animations (localStorage) — your reduced-motion preference. Lifetime: persistent.
- __Host-* Razorpay / Stripe payment-flow cookies — set by the payment gateway during checkout to prevent fraud. Lifetime: session.