Strictly necessary cookies: session cookies for authentication, CSRF tokens, and load balancing. These do not require consent.

Analytics cookies: Vercel Analytics (privacy-friendly, no cross-site tracking) and PostHog (with consent only). You can opt out at any time via the cookie banner.

No third-party advertising or tracking cookies.

Use the cookie banner on first visit, or visit /legal/cookies and click "Manage preferences" to update later.

Disabling strictly necessary cookies will break authentication. We do not recommend it.

We respect the Do Not Track browser signal — when DNT is enabled, no analytics cookies are set regardless of cookie preferences.