What CiteraHub stores in your browser. This is a draft and has not been reviewed by a lawyer.
Session cookies, set by the authentication provider, are what keep you signed in. They are strictly necessary: without them there is no way to know who is asking, and every page behind a session would be unreachable.
No analytics cookie is set. No advertising cookie is set. There is no consent banner because there is nothing to consent to beyond the session itself, and a banner asking permission for something strictly necessary is a banner that teaches people to click through banners.
If analytics is added later, it will be off by default and this document will say so before it is on.
Cookie names, lifetimes and the exact provider behaviour are not documented here yet, and a qualified reviewer must confirm the classification.