There is a 256 byte limit on the size of cookies and the number of cookies is limited to four. They are non-persistent, the cookie support is only intended to be used for session cookies.

If applications use the session cookie mechanisms that are inherent in web servers, 256 bytes is more than enough. In IIS, Apache, and other servers, you can then store as much data as needed in the session object associated with the session cookie.