I read many articles/topics about this problem since yesterday and figured out the pros and cons of sessions, and/or cookies, and profile. Sessions : 1 session per browser, so I have to user User.Identity.Name in session objects to avoid that a user can look another session objects within one browser...