We do not track user data beyond what is strictly necessary — we only persist login sessions. (The GDPR then requires no user consent.)
We use JavaScript only when necessary; many of our pages have no JavaScript.