Identity, payments, and embeds without third-party cookies