Strictly necessary
Session, CSRF, and authentication cookies. These cannot be disabled.
Analytics (opt-in)
Plausible and PostHog. Anonymized, EU-hosted. Toggle off in Settings → Privacy.
Functional
UI preferences (theme, density). 12-month expiry.
Third-party
We do not load advertising cookies.