We only reveal an order after the ID and email match the original checkout.
The order status page uses a short-lived, httpOnly access cookie instead of exposing buyer details in the URL.
Questions still route through KICKBACK, so buyers and partners stay protected during fulfillment.
