I think cause

.vercel.app

is a "root level domain". Similar to

.github.com

... so chrome must not be allowing such cookies to be set