Essential: session, security, CSRF (always active, no consent needed).
Analytics: we do NOT use 3rd-party trackers (no Google Analytics, no Facebook Pixel by default). Optional self-hosted Plausible only with consent.
Advertising: none.
Browser settings to delete/block cookies at any time.