I am working on deploying a web application to google. The frontend uses React and the back end Python.

Right now the idea is to use Google Cloud to host our backend and Google Firebase to host our frontend.

We want to keep our security policy strict in compliance with the most recent browser standards and therefore want our cookie policy to use samesite="strict". However I am not sure if these two services are considered to have the same subdomain.