• A session token, so you remain signed in. Removed when you sign out.
• A security token that prevents a request being forged from another site.
• A preference for reduced motion, where you have set one, so the setting survives a reload.

Consent is required for cookies that are not strictly necessary. All three of ours are, so there is nothing to consent to.

A banner asking permission for cookies that need none would train you to dismiss a question without reading it. That habit is worth more to us unspent.