This is the seller's door, not a customer account — password plus the code from your authenticator app.
One signed session cookie, and it expires after twelve hours of inactivity. No tracking, no newsletter.