Hide sensitive data in plain sight. Quacks like a session cookie but lives in a URL.