Yesh.

I agree. It's IMHO of course, but I prefer to store datasets like that on the server-side. This is much safer since it prevents the user from altering or poisoning their data. If you're not careful you can accept some poisoned data and bad things could happen. The effects of this will depend on the nature of your app, and what you're doing with that data.

There is also a size limit with cookies, if you need to keep a large amount of data tied to a user, sometimes you'll hit that wall.

In addition to Storable, check out Apache::Session.