Cookies & Browser Storage

Separate the browser’s saved clue from the service’s stored record.

Connected topics

Browser storage: mechanisms & limits

What does your browser remember—and where?

A website can save data in your browser and keep separate records on its servers. Cookies and Web Storage follow different rules.

The episode’s shop records, illustrated as a filing cabinet and ledger

Same browser. Different storage.

General mechanisms; websites vary.
MechanismWhereHow it is usedLifetime & limits
CookieBrowserSent with eligible HTTP requests; scope and settings apply.Expiry may be set, or session-based. Session restoration can matter.
localStorageBrowser / originPage scripts read or write it. Not automatically attached to requests.Can persist across browser sessions; clearing, quotas and browser policies apply.
sessionStorageBrowser / origin and tabPage scripts read or write it. Not automatically attached to requests.Survives page reloads; tied to the page session, not a server login session.
Shop recordService’s serversThe service looks up its own records.Determined by the service; removing a browser item does not itself delete it.

Technical references: MDN: cookies, MDN: Web Storage. Checked October 27, 2026.

Sources & further reading

  1. Google Ads — About dynamic remarketing

    A provider’s technical description of past-visitor product ads; not independent evidence for a specific ad or a promised sales effect.

  2. MDN — Third-party cookies

    First- and third-party context and storage behavior. Browser policies and settings matter.

  3. Google My Ad Center — How personalized ads work

    Google’s stated personalization controls and non-personalized contexts; not every advertising provider’s policy.

  4. MDN — Using HTTP cookies

    Cookies and eligible requests; persistence and session-restoration qualifications. The shop is an explicitly defined fictional model.

  5. MDN — Web Storage API

    Browser storage types and scope; not evidence of a named shop’s implementation.

  6. MDN — Storage quotas and eviction criteria

    Storage limits and possible deletion; no guarantee that local data lasts forever.

  7. OWASP — Session Management Cheat Sheet

    Session lifecycle and explicit server-side invalidation. Recommendations do not establish that every service follows them.