Essential
- su_session — keeps you signed in. Expires in 30 days.
- su_csrf — protects forms from cross-site forgery.
Analytics (aggregate, anonymised)
- su_anon_id — first-party pageview counting. No third parties. Expires in 13 months.
Marketing
None on logged-in pages. On the public marketing site we use first-party UTM logging only.
Controlling cookies
Every browser lets you block or delete cookies in its settings. If you block the essential ones, parts of the product will stop working — particularly anything that requires a sign-in.