GDPR-compliant, I think.
I use these session cookies:
That's it. They will automatically be removed after you leave the website.
I use Google Analytics to know how people interact with my website(s). I have however, made sure that IP-addresses are anonymised.
I'm still working on anonymising logfiles. They are automatically deleted after 52 weeks though.