The short version: session and consent only.

GlueArrow does not run third-party ad tracking. The cookies we set are limited to session identity (ga_session), consent state, theme, and the Being's memory hand-off between WhatsApp and the web.

• ga_session — signed JWT, HTTP-only, required for login
• ga-theme — remembers light/dark preference
• ga_being_sid — links your web session to your WhatsApp Being
• No third-party analytics — we use first-party telemetry on our own stack