Only what the sign-in needs.

Essential cookies

The authentication provider and Trip Planner use short-lived, HttpOnly, Secure session cookies to keep a signed-in browser request attached to the account you chose. These cookies are necessary for sign-in, account access, billing management, export, and deletion.

You can block or delete cookies in your browser, but the External Account Surface will not work without the essential session cookie. ChatGPT consent and browser sessions remain separate.

What is not used

• No advertising or cross-site marketing cookies.
• No analytics identifiers, session replay, fingerprinting, or behavioral profiles.
• No cookie stores Trip Plan content, payment-card data, access tokens, or original booking documents.

Provider cookies

Stripe, WorkOS, and other providers may use their own essential cookies on their own domains during authentication or checkout. Their notices and controls apply to those provider pages.