| elido_consent | Remembers your cookie choices and their version | 12 months | Strictly necessary |
| elido_lt | Last campaign of this visit (UTM tags, referrer site, landing page). No click IDs, no visitor ID | Session | Strictly necessary |
| elido_ft, elido_attr_tok | First campaign that brought you here (UTM tags, referrer, ad click IDs such as gclid) | 90 days | Marketing and ads |
| _ga, _ga_* | Tells returning visitors from new ones in Google Analytics | 13 months | Analytics |
| _gcl_aw, _gcl_au | Google Ads conversion measurement | 90 days | Marketing and ads |
| ory_kratos_session | Authenticated session - required to access the dashboard. | 30 days | Strictly necessary |
| elido_locale | Remembers the language the visitor picked on the marketing site. | 1 year | Preferences |
| elido_workspace_id | Remembers the active workspace and routes API calls to the right workspace (also used on custom portal hostnames). | 1 year | Strictly necessary |
| elido_mfa_pending | Tracks the impossible-travel step-up MFA challenge state. | 15 min | Strictly necessary |
| csrf_token_* | Anti-CSRF token issued by our authentication layer for sign-in flows. | 1 year | Strictly necessary |
| elido_authed | Login hint shared across elido.app subdomains so the marketing site can show a dashboard link; contains no personal data. | 30 days | Preferences |
| sbjs_* | Sourcebuster traffic-source attribution (UTM, referrer, first and last touch), set on sign-up and login pages so a sign-up can be attributed to a campaign. | 6 months | Analytics / attribution |
| elido_sidebar_collapsed, elido_upgrade_banner_dismissed_until, elido_promo_* | Remembers UI choices (sidebar state, dismissed upgrade banner, promo counters). | 1 year | Preferences |
| elido_sso_state | Short-lived state value for the single sign-on handshake. | 5 min | Strictly necessary |