Hallet only uses strictly necessary cookies (session, security, "remember me" and the cookie notice preference). No advertising or third-party tracking cookies are used.
For signed-in users who haven't turned usage statistics off, the browser also keeps a hallet.activity local storage entry holding only a visit id and the time of the last activity; it is renewed after 30 minutes of inactivity.