Four things get stored in your browser. Three are strictly necessary; one is analytics, and it does not load unless you allow it.
Non-essential tracking is gated behind a choice rather than a notice. On your first visit the site asks once; until you answer, Google Analytics is not loaded at all, and if you decline it never is. This applies everywhere, not only to visitors in the EU or UK.
To change your mind, clear this site's data in your browser and the question is asked again on your next visit.
sb-<project>-auth-tokenCookie (first-party)Keeps you signed in. Issued by Supabase Auth after email sign-in; without it the dashboard and AMA replies cannot know who you are.
pb-consent-analyticsLocal storageRemembers whether you allowed or declined analytics, so you are not asked on every page.
pb session identifierIn-memory / hashedCounts a visit to a billboard once rather than on every scroll. Hashed with a server-side salt; it is not a cross-site identifier and cannot be reversed to a person.
_ga, _ga_<id>Cookie (Google Analytics)Aggregate page analytics: which pages get read, roughly where readers are. Advertising and personalisation signals are switched off explicitly, and IPs are anonymised.
Under the GDPR and CCPA you can ask for a copy of what is held about you, have it corrected, or have it deleted. Write to the contact page and it is handled within 30 days. The wider statement of what is collected and why is in the privacy policy.