The issue is because your frontend and backend are on different domains (onrender.com - vercel.app) and cookies are limited by the same origin policy which means cookies can't be shared across completely different domains (like example.com and example2.com) for security reasons. To persist cookies, both apps must be on the same domain like between foo.example.com, example.com or bar.example.com.