Cookies
- Sent with every HTTP request (in plain text)
- Limited to 4KB each, 20 per domain. 300 per browser.
- No real API
Local and Session Storage
- Not sent to server (more secure / less bandwidth)
- Limited to 5MB each
- Long term or session long
- Simple API