Cart data (a shopping in progress) is normally stored in the user session, and user session data should always be stored server side for security reasons.
Using cookies for sessions should only be used for very simple applications that don't have any server side storage at all, and do not handle any sensitive data. It is bad practice to store data client side.
There is no way every user can see the cart data, as it is in the user session.