1. Request
The cookies go only to the site, inside the TLS session; the notary cannot read them and the presentation hides them unless you choose otherwise.
More headers
2. Response
3. What to reveal
Everything not ticked stays hidden in the presentation; the verifier sees only its length.