Analytics, referral attribution, and session cookies — what each one does and how to opt out. Marketing scripts (PostHog, Rewardful) never load before you accept.