Without these you could not log in or send a form, so they cannot be turned off. They never leave this site.
sessionid
Keeps you logged in, and carries a link from an email over to the page it leads to.
Kept for two weeks, or until you log out.
csrftoken
Confirms that a form was sent from this site and not from another one on your behalf.
Kept for a year.
messages
Carries a notice over to the next page, such as the one saying your password was changed.
Kept until the notice is shown.
Google Analytics
If you agree, the site counts your visit with Google Analytics, to see which pages people use. It runs with Google signals and ad personalisation off. Until you agree nothing is loaded from Google, and if you decline nothing ever is.
Google describes what it does with the data on its own page.
consent
Remembers whether you agreed to Google Analytics, so you are not asked on every page.
Kept for six months.
_ga
Set by Google Analytics, only once you agree: tells one visitor's visits apart from another's.
Kept for two years.
_ga_ZJGDVRHBTR
Set by Google Analytics, only once you agree: keeps track of the visit in progress.
Kept for two years.
You can change your mind at any time, here or under Cookie settings at the bottom of every page. Declining removes the Google Analytics cookies.
May we count your visit with Google Analytics? It stores cookies in your browser and sends Google the pages you view. Until you agree, nothing is loaded from Google. About cookies