Essential session cookie
Protected Admin and Investor areas use the first-party cookie “phendhey_session” after successful authentication. It is required to keep the user signed in and to enforce role-based access.
- Purpose: authentication and security.
- Lifetime: up to 12 hours unless the user signs out earlier.
- Protection: HttpOnly, SameSite=Lax and Secure in production.
- Because it is strictly necessary for a requested protected service, it is not used for advertising or behavioural tracking.
