Short, because the honest list is short. Bearings sets exactly two cookies, both strictly necessary for signing in. There are no analytics cookies, no advertising cookies, and no tracking of any kind, which is also why the site shows no cookie banner.
Access token
Keeps you signed in for about 15 minutes. HttpOnly (invisible to scripts), secure, same-origin.
Refresh token
Lives 30 days and quietly renews the access token so you are not signing in every quarter of an hour. Same protections.
The app stores a few preferences (theme, colour scheme, display formats) in your browser's local storage. These never leave your device and exist purely so the app remembers how you like it.
You can, but you will not stay signed in. Both cookies are strictly necessary: without them, authentication simply does not work. Nothing else on the site depends on tracking you, so there is nothing else to turn off.