▶

PlayBeat Digital Admin

Restricted — authorized administrators only

Sessions are served by an httpOnly, Secure, SameSite cookie with server-side expiry, idle timeout and immediate revocation. Storefront accounts (/signin) are a separate identity domain and never grant admin access (README §8.1).