Cookies in use
NextAuth session cookies: authenticate signed-in users and protect account or admin routes. Their exact names vary between HTTP development and secure HTTPS production.
bmga_cookie_notice: records that this notice was acknowledged for up to 180 days. It contains no biological data, account details, or tracking identifier.
No optional tracking
No advertising, behavioral profiling, or analytics cookie is enabled by the current portal code. A future optional service must be added behind explicit consent and documented here before activation.
Browser controls
You can remove cookies through your browser settings. Removing the session cookie signs you out; removing the notice cookie causes the notice to appear again.