Three cookie buckets. You control two.

Authentication, security, load balancing. Without these the dashboard literally does not work — we can't turn them off.

Helps us understand which dashboard features get used. First-party only — no Google Analytics, no Hotjar, no third-party scripts.

Lets us measure which marketing pages led to which signups. Off by default. We do not run ad-tech retargeting pixels on the redirect flow ever.